EL
Product
electron-builder
4
CVEs
0
On KEV
7.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 3Medium 1Low 0
Watch
Add electron-builder to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-54672 | 7.8 | Jun 30 | electron-updater: Uncontrolled search path elements within `AppImage` built by `app-builder-lib` Affected: < 26.15.0 |
| CVE-2024-39698 | 7.5 | Jul 9 | Code Signing Bypass on Windows in electron-updater < 6.3.0-alpha.6 Affected: < 6.3.0-alpha.6 |
| CVE-2024-27303 | 7.3 | Mar 6 | electron-builder's NSIS installer - execute arbitrary code on the target machine (Windows only) Affected: < 24.13.2 |
| CVE-2026-54673 | 6.5 | Jun 30 | electron-updater: Cross-origin redirect leaks `PRIVATE-TOKEN` and mixed-case `Authorization` credentials in `builder-util-runtime` Affected: < 26.15.0 |
Showing 4