CVE-2023-39956
1 advisory.
npm/electron CVE-2023-39956: medium 6.1
Electron vulnerable to out-of-package code execution when launched with arbitrary cwd
Action: Upgrade electron to 22.3.19 or later.
npm i electron@22.3.19npm i electron@23.3.13npm i electron@24.7.1npm i electron@25.5.0npm i electron@26.0.0-beta.13Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 22.3.19 | - |
| 23.0.0-alpha.1 | 23.3.13 | - |
| 24.0.0-alpha.1 | 24.7.1 | - |
| 25.0.0-alpha.1 | 25.5.0 | - |
| 26.0.0-alpha.1 | 26.0.0-beta.13 | - |
Fixed versions
| 22.3.19 | 23.3.13 | 24.7.1 | 25.5.0 | 26.0.0-beta.13 |
Sources
- osv: GHSA-7x97-j373-85x5
- https://github.com/electron/electron/security/advisories/GHSA-7x97-j373-85x5
- https://nvd.nist.gov/vuln/detail/CVE-2023-39956
- https://github.com/electron/electron
CVE-2023-39956 · published · modified · JSON