Electron-userland vulnerabilities
We track 3 vulnerabilities in Electron-userland products across 2 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on June 30, 2026.
Latest Electron-userland vulnerabilities
- 7.8 High severity
electron-builder: Uncontrolled Search Path Element
electron-updater allows for automatic updates for Electron apps. Prior to 26.15.0, AppImage targets built by app-builder-lib could use an empty path component when setting the LD_LIBRARY_PATH environment variable at runtime. This causes the current working dir
- 7.5 High severity
electron-builder: Improper Certificate Validation
electron-updater allows for automatic updates for Electron apps. The file `packages/electron-updater/src/windowsExecutableCodeSignatureVerifier.ts` implements the signature validation routine for Electron applications on Windows. Because of the surrounding she
- 7.3 High severity
electron-builder: Untrusted Search Path
electron-builder is a solution to package and build a ready for distribution Electron, Proton Native app for macOS, Windows and Linux. A vulnerability that only affects eletron-builder prior to 24.13.2 in Windows, the NSIS installer makes a system call to open