CVE-2022-21718

npm/electron CVE-2022-21718: low 3.4

Renderers can obtain access to random bluetooth device without permission in Electron

Action: Upgrade electron to 13.6.6 or later.

npm i electron@13.6.6

npm i electron@14.2.4

npm i electron@15.3.5

npm i electron@16.0.6

npm i electron@17.0.0-alpha.6

Affected

Fixed versions

Sources

• osv: GHSA-3p22-ghq8-v749
• https://github.com/electron/electron/security/advisories/GHSA-3p22-ghq8-v749
• https://nvd.nist.gov/vuln/detail/CVE-2022-21718
• https://github.com/electron/electron/pull/32178
• https://github.com/electron/electron/pull/32240
• https://github.com/electron/electron

CVE-2022-21718 · published 2022-03-22T18:49:36Z · modified 2023-11-08T04:08:09.293794Z · JSON