What’s Vulnerable › Products

electron-userland electron-builder vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your electron-userland electron-builder version is affected

Latest electron-userland electron-builder vulnerabilities

• CVE-2026-54673 — electron-updater: Cross-origin redirect leaks `PRIVATE-TOKEN` and mixed-case `Authorization` credentials in `builder-util-runtime` (CVSS 6.5)
• CVE-2026-54672 — electron-updater: Uncontrolled search path elements within `AppImage` built by `app-builder-lib` (CVSS 7.8)
• CVE-2024-39698 — Code Signing Bypass on Windows in electron-updater < 6.3.0-alpha.6 (CVSS 7.5)
• CVE-2024-27303 — electron-builder's NSIS installer - execute arbitrary code on the target machine (Windows only) (CVSS 7.3)