CVE-2026-43944

npm/electerm CVE-2026-43944: critical 9.6

Electerm users can run dangrous code through link or command line

Action: Upgrade electerm to 3.8.8 or later.

npm i electerm@3.8.8

Affected

Fixed versions

Sources

• osv: GHSA-mpm8-cx2p-626q
• https://github.com/electerm/electerm/security/advisories/GHSA-mpm8-cx2p-626q
• https://nvd.nist.gov/vuln/detail/CVE-2026-43944
• https://github.com/electerm/electerm/commit/0599e67069b00e376a2e962649aaad6096e63507
• https://github.com/electerm/electerm/commit/8a6a17951e96d715f5a231532bbd8303fe208700
• https://github.com/electerm/electerm/commit/a79e06f4a1f0ac6376c3d2411ef4690fa0377742
• https://github.com/electerm/electerm
• https://github.com/electerm/electerm/releases/tag/v3.8.15

CVE-2026-43944 · published 2026-05-08T18:46:04Z · modified 2026-05-13T13:56:11.555899Z · JSON