electron-userland

Products

ProductCVEsExploitedLatest
electron-builder4–Jun 30, 2026
app-builder-lib1–Jun 30, 2026
builder-util-runtime1–Jun 30, 2026

Exploited and recent CVEs

  • CVE-2026-54672 High 7.8 electron-updater: Uncontrolled search path elements within `AppImage` built by `app-builder-lib` 0.2%
  • CVE-2026-54672 High 7.8 electron-updater: Uncontrolled search path elements within `AppImage` built by `app-builder-lib` 0.2%
  • CVE-2026-54673 High 8.2 electron-updater: Cross-origin redirect leaks `PRIVATE-TOKEN` and mixed-case `Authorization` credentials in `builder-util-runtime` 0.4%
  • CVE-2026-54673 High 8.2 electron-updater: Cross-origin redirect leaks `PRIVATE-TOKEN` and mixed-case `Authorization` credentials in `builder-util-runtime` 0.4%
  • CVE-2024-39698 High 7.5 Code Signing Bypass on Windows in electron-updater < 6.3.0-alpha.6 0.4%
  • CVE-2024-27303 High 7.3 electron-builder's NSIS installer - execute arbitrary code on the target machine (Windows only) 0.3%