electron-userland vulnerabilities
4 published CVEs name electron-userland among the affected products.
- 4Published CVEs4 of them scored
- 2Last 12 monthspublished in the last year
- 0Critical4 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-54672
electron-updater: Uncontrolled search path elements within `AppImage` built by `app-builder-lib`
electron-userland · electron-builder
High7.8 - CVE-2026-54673
electron-updater: Cross-origin redirect leaks `PRIVATE-TOKEN` and mixed-case `Authorization` credentials in `builder-util-runtime`
electron-userland · electron-builder
High8.2 - CVE-2024-39698
Code Signing Bypass on Windows in electron-updater < 6.3.0-alpha.6
electron-userland · electron-builder
High7.5 - CVE-2024-27303
electron-builder's NSIS installer - execute arbitrary code on the target machine (Windows only)
electron-userland · electron-builder
High7.3