electron@28.3.3 vulnerabilities
Build cross platform desktop apps with JavaScript, HTML, and CSS
-
latest version
32.1.2
-
first published
12 years ago
-
latest version published
8 days ago
-
licenses detected
- >=0
Direct Vulnerabilities
Known vulnerabilities in the electron package. This does not include vulnerabilities belonging to this package’s dependencies.
Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.Vulnerability | Vulnerable Version |
---|---|
electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Type Confusion in v8 engine. How to fix Type Confusion? A fix was pushed into the |
*
|
electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Use After Free through the How to fix Use After Free? Upgrade |
<29.4.6
>=30.0.0 <30.4.0
|
electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Out-of-bounds Read via a crafted HTML page. An attacker can potentially perform a sandbox escape by manipulating the memory outside its intended buffer limits. How to fix Out-of-bounds Read? Upgrade |
<29.4.6
>=30.0.0 <30.4.0
|
electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Out-of-bounds Read through the V8 engine. An attacker can access memory locations outside of the intended bounds by crafting a malicious HTML page. Note: This is only exploitable if the user navigates to or is redirected to a malicious web page. How to fix Out-of-bounds Read? Upgrade |
<29.4.6
>=30.0.0 <30.4.0
|
electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Use After Free via specific UI gestures in the How to fix Use After Free? Upgrade |
<29.4.6
>=30.0.0 <30.4.0
|
electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Heap-based Buffer Overflow through the Note: This is only exploitable if the user navigates to or is redirected to a malicious web page. How to fix Heap-based Buffer Overflow? Upgrade |
<29.4.6
>=30.0.0 <30.4.0
|
electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Use After Free via the How to fix Use After Free? Upgrade |
<29.4.6
>=30.0.0 <30.4.0
|
electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Race Condition via a crafted Chrome Extension. An attacker who convinced a user to install a malicious extension can inject scripts or HTML into a privileged page. How to fix Race Condition? Upgrade |
<29.4.6
>=30.0.0 <30.4.0
|
electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Use After Free through the How to fix Use After Free? Upgrade |
<29.4.6
>=30.0.0 <30.4.0
|
electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Use After Free in How to fix Use After Free? Upgrade |
<30.4.0
>=31.0.0 <31.4.0
|
electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Use After Free in How to fix Use After Free? Upgrade |
<30.4.0
>=31.0.0 <31.4.0
|
electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Use After Free through the How to fix Use After Free? Upgrade |
<29.4.5
>=30.0.0 <30.2.0
|
electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Use After Free due to the improper handling of memory in the How to fix Use After Free? Upgrade |
<29.4.5
>=30.0.0 <30.2.0
|
electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Use After Free through the How to fix Use After Free? Upgrade |
<29.4.5
>=30.0.0 <30.2.0
|
electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Use After Free through the How to fix Use After Free? Upgrade |
<29.4.5
>=30.0.0 <30.2.0
|
electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Type Confusion via a crafted HTML page in the V8 engine. **Note: ** This is only exploitable if the user navigates to or is redirected to the malicious page. How to fix Type Confusion? Upgrade |
<29.4.3
|
electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Out-of-bounds Read through the How to fix Out-of-bounds Read? Upgrade |
<29.4.3
|
electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Use After Free via the How to fix Use After Free? Upgrade |
<29.4.3
|
electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Use After Free via the Note: 126.0.6478.56 is the fixed version for Windows and Mac. Version 126.0.6478.54 fixes the vulnerability in Linux How to fix Use After Free? Upgrade |
<29.4.3
|
electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Use After Free due to the improper handling of memory in the Note: 126.0.6478.56 is the fixed version for Windows and Mac. Version 126.0.6478.54 fixes the vulnerability in Linux How to fix Use After Free? Upgrade |
<29.4.3
|
electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Heap-based Buffer Overflow in the How to fix Heap-based Buffer Overflow? Upgrade |
<29.4.3
|
electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Heap-based Buffer Overflow in the How to fix Heap-based Buffer Overflow? Upgrade |
<29.4.3
|
electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Type Confusion due to the How to fix Type Confusion? Upgrade |
<29.4.3
|
electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Use After Free in the scheduling process. An attacker can execute arbitrary code inside a sandbox by using a crafted HTML page. How to fix Use After Free? Upgrade |
<29.4.3
|
electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Out-of-Bounds Write through the How to fix Out-of-Bounds Write? Upgrade |
<29.4.3
|
electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Heap-based Buffer Overflow through the How to fix Heap-based Buffer Overflow? Upgrade |
<29.4.3
>=30.0.0-alpha.1 <30.1.2
|
electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Use After Free through the How to fix Use After Free? Upgrade |
<29.4.3
|
electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Use After Free through the How to fix Use After Free? Upgrade |
<29.4.3
|
electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Use After Free through the How to fix Use After Free? Upgrade |
<29.4.3
|
electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Privilege Context Switching Error in How to fix Privilege Context Switching Error? Upgrade |
<29.4.0
|
electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Improper Restriction of Operations within the Bounds of a Memory Buffer due to an inappropriate implementation in the V8 engine. An attacker can potentially perform out of bounds memory access by crafting a malicious HTML page. How to fix Improper Restriction of Operations within the Bounds of a Memory Buffer? Upgrade |
<29.3.0
|