electron-builder vulnerabilities

3 known vulnerabilities in electron-builder from Electron-userland. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  electron-builder: Uncontrolled Search Path Element

  CVE-2026-54672Jun 30, 2026Electron-userland

  electron-updater allows for automatic updates for Electron apps. Prior to 26.15.0, AppImage targets built by app-builder-lib could use an empty path component when setting the LD_LIBRARY_PATH environment variable at runtime. This causes the current working dir

• 7.5 High severity

  electron-builder: Improper Certificate Validation

  CVE-2024-39698Jul 9, 2024Electron-userland

  electron-updater allows for automatic updates for Electron apps. The file `packages/electron-updater/src/windowsExecutableCodeSignatureVerifier.ts` implements the signature validation routine for Electron applications on Windows. Because of the surrounding she

• 7.3 High severity

  electron-builder: Untrusted Search Path

  CVE-2024-27303Mar 6, 2024Electron-userland

  electron-builder is a solution to package and build a ready for distribution Electron, Proton Native app for macOS, Windows and Linux. A vulnerability that only affects eletron-builder prior to 24.13.2 in Windows, the NSIS installer makes a system call to open