electron@29.3.0 vulnerabilities
Build cross platform desktop apps with JavaScript, HTML, and CSS
-
latest version
30.0.2
-
latest non vulnerable version
-
first published
12 years ago
-
latest version published
13 hours ago
-
licenses detected
- >=0
Direct Vulnerabilities
Known vulnerabilities in the electron package. This does not include vulnerabilities belonging to this package’s dependencies.
Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.Vulnerability | Vulnerable Version |
---|---|
electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Out-of-bounds Write in the How to fix Out-of-bounds Write? Upgrade |
<27.3.11
>=28.0.0 <28.3.1
>=29.0.0 <29.3.1
|
electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Heap-based Buffer Overflow in the ANGLE component. An attacker can potentially exploit heap corruption through a crafted HTML page. How to fix Heap-based Buffer Overflow? Upgrade |
<27.3.11
>=28.0.0 <28.3.1
>=29.0.0 <29.3.1
|
electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Use After Free due to improper handling of objects in memory in the Dawn component. An attacker can cause heap corruption and potentially execute arbitrary code by convincing a user to visit a specially crafted HTML page. How to fix Use After Free? Upgrade |
<27.3.11
>=28.0.0 <28.3.1
>=29.0.0 <29.3.1
|