VendorsElectronelectron-builderall versions
Vulnerabilities

Electron electron-builder

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

4CVEs
CVE-2026-54673
electron-updater: Cross-origin redirect leaks `PRIVATE-TOKEN` and mixed-case `Authorization` credentials in `builder-util-runtime`
Published 2026-06-30 · Analyzed
8.2EPSS 0.004
CVE-2026-54672
electron-updater: Uncontrolled search path elements within `AppImage` built by `app-builder-lib`
Published 2026-06-30 · Analyzed
7.8EPSS 0.002
CVE-2024-39698
Code Signing Bypass on Windows in electron-updater < 6.3.0-alpha.6
Published 2024-07-09 · Modified
7.5EPSS 0.004
CVE-2024-27303
electron-builder's NSIS installer - execute arbitrary code on the target machine (Windows only)
Published 2024-03-06 · Analyzed
7.3EPSS 0.003