EL
Vendor
electron-userland
6
CVEs
0
On KEV
0
New 30D
Products
EL7.8
electron-builder
electron-userland
4 CVEs0 on KEV0 new
AP7.8
app-builder-lib
electron-userland
1 CVEs0 on KEV0 new
BU6.5
builder-util-runtime
electron-userland
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-54672 | EL electron-builder electron-userland | 7.8 | Jun 30 | electron-updater: Uncontrolled search path elements within `AppImage` built by `app-builder-lib` |
| CVE-2026-54673 | EL electron-builder electron-userland | 6.5 | Jun 30 | electron-updater: Cross-origin redirect leaks `PRIVATE-TOKEN` and mixed-case `Authorization` credentials in `builder-util-runtime` |
| CVE-2024-39698 | EL electron-builder electron-userland | 7.5 | Jul 9 | Code Signing Bypass on Windows in electron-updater < 6.3.0-alpha.6 |
| CVE-2024-27303 | EL electron-builder electron-userland | 7.3 | Mar 6 | electron-builder's NSIS installer - execute arbitrary code on the target machine (Windows only) |