npm/electerm CVE-2026-43942: medium 6.5, EPSS 0.10%

Electerm's full process.env exposed to renderer via window.pre.env

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: GHSA-37j4-88rp-2f6h
• https://github.com/electerm/electerm/security/advisories/GHSA-37j4-88rp-2f6h
• https://nvd.nist.gov/vuln/detail/CVE-2026-43942
• https://github.com/electerm/electerm

CVE-2026-43942 · published 2026-05-08T18:37:42Z · modified 2026-05-08T18:56:25.997508Z · JSON