Vulnerabilities

TI-2026-39495 CVE-2026-54672 · GHSA-7g7r-gx96-252g

electron-updater: Uncontrolled search path elements within `AppImage` built by `app-builder-lib`

LOW 35

electron-updater allows for automatic updates for Electron apps.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00186 Published 2026-06-30 Fixed in 26.15.0 CWE-427

TI-2026-39496 CVE-2026-54673 · GHSA-p2f4-r6v6-j797

HIGH 69

electron-updater allows for automatic updates for Electron apps.

CVSS 4.0HIGH 8.2 Network Low privileges User interaction EPSS 0.00407 Published 2026-06-30 Partial fix · 26.15.0, 9.7.0 CWE-200

TI-2024-26621 CVE-2024-39698 · GHSA-9jxc-qjr9-vjxq

HIGH 68

electron-updater allows for automatic updates for Electron apps.

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.00425 Published 2024-07-09 Fixed in 6.3.0-alpha.6 CWE-154

TI-2024-18141 CVE-2024-27303 · GHSA-r4pf-3v7r-hh55

LOW 34

electron-builder is a solution to package and build a ready for distribution Electron, Proton Native app for macOS, Windows and Linux.

CVSS 3.1HIGH 7.3 Local Low privileges User interaction EPSS 0.00282 Published 2024-03-06 Fixed in 24.13.2 CWE-426