CVE-2026-42890
1 advisory.
npm/actual CVE-2026-42890: medium
actual Allows Electron to Run As Node
Action: Upgrade actual to 26.5.0 or later.
npm i actual@26.5.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 26.5.0 | - |
Fixed versions
| 26.5.0 |
Sources
- osv: GHSA-7rvm-xjpp-63r9
- https://github.com/actualbudget/actual/security/advisories/GHSA-7rvm-xjpp-63r9
- https://nvd.nist.gov/vuln/detail/CVE-2026-42890
- https://actualbudget.org/blog/release-26.5.0
- https://github.com/actualbudget/actual
CVE-2026-42890 · published · modified · JSON