CVE-2023-44402
1 advisory.
npm/electron CVE-2023-44402: medium 6.1
ASAR Integrity bypass via filetype confusion in electron
Action: Upgrade electron to 22.3.24 or later.
npm i electron@22.3.24npm i electron@24.8.3npm i electron@25.8.1npm i electron@26.2.1npm i electron@27.0.0-alpha.7Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 22.3.24 | - |
| 24.0.0-alpha.1 | 24.8.3 | - |
| 25.0.0-alpha.1 | 25.8.1 | - |
| 26.0.0-alpha.1 | 26.2.1 | - |
| 27.0.0-alpha.1 | 27.0.0-alpha.7 | - |
| 23.0.0-alpha.1 | - | 23.3.13 |
Fixed versions
| 22.3.24 | 24.8.3 | 25.8.1 | 26.2.1 | 27.0.0-alpha.7 |
Sources
- osv: GHSA-7m48-wc93-9g85
- https://github.com/electron/electron/security/advisories/GHSA-7m48-wc93-9g85
- https://nvd.nist.gov/vuln/detail/CVE-2023-44402
- https://github.com/electron/electron/pull/39788
- https://github.com/electron/electron
- https://www.electronjs.org/docs/latest/tutorial/fuses
CVE-2023-44402 · published · modified · JSON