PkgSeer

Vulnerabilities

Last updated 47 minutes ago
Filters
Severity
Critical Severity
CVSS Score Range: 9.0–10.0
Critical severity vulnerabilities (CVSS 9.0–10.0). These represent the highest impact issues.
High Severity
CVSS Score Range: 7.0–8.9
High severity vulnerabilities (CVSS 7.0–8.9). Serious vulnerabilities that should be prioritized soon after critical fixes.
Medium Severity
CVSS Score Range: 4.0–6.9
Medium severity vulnerabilities (CVSS 4.0–6.9). Important issues that meaningfully reduce security confidence.
Low Severity
CVSS Score Range: < 4.0
Low severity vulnerabilities (CVSS < 4.0). Hygiene issues that can accumulate but pose lower immediate risk.
Unknown Severity
CVSS Score Range: No score
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
Package Summary Severity Published Modified
electron Electron: HID and USB permission checks can be attributed to the wrong origin Medium Risk 5.4 2 hours ago 2 hours ago
electron Electron: File and HTTP protocol handlers allow cross-origin reads without corsEnabled High Risk 7.4 22 days ago 22 days ago
electron Electron: Sandboxed preload code cache can be poisoned by a compromised renderer High Risk 7.8 22 days ago 22 days ago
electron Electron: Local race condition in Squirrel.Mac update installation on macOS Medium Risk 6.7 22 days ago 22 days ago
electron Electron: <webview> can enable Node.js integration in Web Workers despite embedder restrictions High Risk 8.3 22 days ago 22 days ago
electron Electron: Windows opened from a sandboxed top-level document do not inherit its sandbox restrictions High Risk 8.2 22 days ago 22 days ago
electron Electron drops inherited HTML sandbox restrictions for popups opened through OpenURLFromTab High Risk 8.2 22 days ago 22 days ago
electron-updater electron-updater Code Signing Bypass on Windows High Risk 7.5 2 years ago 1 month ago
@electron/packager @electron/packager's build process memory potentially leaked into final executable High Risk 7.5 2 years ago 1 month ago
electron Electron affected by libvpx's heap buffer overflow in vp8 encoding High Risk 8.8 3 years ago 1 month ago
electron libwebp: OOB write in BuildHuffmanTable High Risk 8.8 3 years ago 1 month ago
electron ASAR Integrity bypass via filetype confusion in electron Medium Risk 6.1 2 years ago 1 month ago
electron Electron context isolation bypass via nested unserializable return value Medium Risk 6.0 3 years ago 1 month ago
electron Electron vulnerable to out-of-package code execution when launched with arbitrary cwd Medium Risk 6.1 3 years ago 1 month ago
electron IPC messages delivered to the wrong frame in Electron Medium Risk 5.4 5 years ago 1 month ago
haemmerelectronics.sepppenner.windowshello Internal NCryptDecrypt method could be used externally from WindowsHello library. Medium Risk 5.1 6 years ago 1 month ago
electron-internal-utils Malicious code in electron-internal-utils (npm) Unknown 4 months ago 1 month ago
autobahn-electron-probe Malicious code in autobahn-electron-probe (npm) Unknown 1 month ago 1 month ago
com.db.autobahn.notification-center-electron Malicious code in com.db.autobahn.notification-center-electron (npm) Unknown 1 month ago 1 month ago
electron Electron: DevTools JavaScript Injection via Unsanitized Dock State Parameter Medium Risk 5.7 2 months ago 2 months ago
electron Electron: Sandboxed iframe can bypass the allow-popups restriction via the OpenURL navigation path High Risk 7.2 2 months ago 2 months ago
electron-sessions Malicious code in electron-sessions (npm) Unknown 2 months ago 2 months ago
electron Electron: DevTools embedder handler executes arbitrary files via shell open Medium Risk 6.9 2 months ago 2 months ago
electron Electron: Sandboxed iframes can launch external protocol handlers Medium Risk 5.4 2 months ago 2 months ago
electron Electron: contextBridge object copy honors prototype setters Medium Risk 5.4 2 months ago 2 months ago
electron Electron: window.open features string controls some window options considered privileged Medium Risk 5.3 2 months ago 2 months ago
electron Electron: ProtocolResponse.url reuses the default session cache instead of the registering session Medium Risk 5.9 2 months ago 2 months ago
electron Electron: Custom protocol with supportFetchAPI but not corsEnabled allows cross-origin reads High Risk 7.4 2 months ago 2 months ago
electron Electron: HTTP redirect followed into local file loader Medium Risk 5.9 2 months ago 2 months ago
electron Electron: shell.openPath path validation bypass via embedded null byte Medium Risk 6.0 2 months ago 2 months ago
electron Electron: Context isolation bypass via Function.prototype.bind hijack High Risk 7.5 2 months ago 2 months ago
electron Electron: Extension tab APIs operate across session boundaries Medium Risk 6.6 2 months ago 2 months ago
electron Electron: Permission Check Handler Receives Main Frame Origin Instead of Requesting Iframe Origin Medium Risk 5.9 2 months ago 2 months ago
electron Electron: Cross-origin iframe can position native autofill popup Low Risk 3.1 2 months ago 2 months ago
electron Electron: Parent process code-sign check is spoofable Medium Risk 6.3 2 months ago 2 months ago
electron Electron: Off-screen rendering trusts GPU-supplied geometry over shared-memory size Low Risk 3.9 2 months ago 2 months ago
@403name/electron-buidler Malicious code in @403name/electron-buidler (npm) Unknown 4 months ago 2 months ago
electron Electron: Buffer performs incorrect byte length calculations resulting in heap buffer under/overflow Critical 9.5 4 months ago 3 months ago
electron-orbit Malicious code in electron-orbit (npm) Unknown 3 months ago 3 months ago
electron Context isolation bypass via leaked cross-context objects in Electron High Risk 7.8 6 years ago 3 months ago
electron Context isolation bypass via contextBridge in Electron High Risk 7.7 6 years ago 3 months ago
electron Electron's sandboxed renderers can obtain thumbnails of arbitrary files through the nativeImage API Medium Risk 6.8 5 years ago 3 months ago
electron Context isolation bypass via Promise in Electron Medium Risk 6.8 6 years ago 3 months ago
electron Context isolation bypass in Electron Medium Risk 5.6 6 years ago 3 months ago
electron Unpreventable top-level navigation High Risk 7.5 6 years ago 3 months ago
electron Arbitrary file read via window-open IPC in Electron Medium Risk 6.8 6 years ago 3 months ago
jest-electron Malicious code in jest-electron (npm) Unknown 5 months ago 5 months ago
electron Electron: Named window.open targets not scoped to the opener's browsing context Medium Risk 6.0 6 months ago 6 months ago
electron Electron: Crash in clipboard.readImage() on malformed clipboard image data Low Risk 2.8 6 months ago 6 months ago
electron Electron: Use-after-free in offscreen shared texture release() callback Low Risk 2.3 6 months ago 6 months ago
Data courtesy of OSV.dev
Page 1