CVE-2026-114122

npm/electron CVE-2026-114122: low 3.9

Electron: Frame subscription trusts GPU-supplied frame geometry

Action: Upgrade electron to 42.11.6 or later.

npm i electron@42.11.6

npm i electron@43.7.3

npm i electron@44.4.3

npm i electron@45.0.0-alpha.9

Affected

Fixed versions

Sources

• osv: GHSA-3qxv-5xgr-q7w9
• https://github.com/electron/electron/security/advisories/GHSA-3qxv-5xgr-q7w9
• https://nvd.nist.gov/vuln/detail/CVE-2026-114122
• https://github.com/electron/electron/pull/54047
• https://github.com/electron/electron/pull/54038
• https://github.com/electron/electron/pull/54037
• https://github.com/electron/electron/pull/54036
• https://github.com/electron/electron/pull/54033
• https://github.com/electron/electron/commit/d7f87070a8d738e561245d1ade4d6fbb082db80a
• https://github.com/electron/electron/commit/d496507ffa1693edaa704a4be130fbcb8ecb4ada
• https://github.com/electron/electron/commit/8d48be150c3fd53b0d02854124bdb7858598799c
• https://github.com/electron/electron/commit/64ae597deda8956037387b439e6361f0fe936c86
• https://github.com/electron/electron/commit/24d8dbc661c6a109476ae59e9a2740b35d005cf4
• https://github.com/electron/electron/releases/tag/v42.11.6
• https://github.com/electron/electron/releases/tag/v43.7.3
• https://github.com/electron/electron/releases/tag/v44.4.3
• https://github.com/electron/electron/releases/tag/v45.0.0-alpha.9
• https://github.com/electron/electron

CVE-2026-114122 · published 2026-10-22T16:46:06Z · modified 2026-10-22T17:00:05.166832387Z · JSON