CVE-2026-54672
1 advisory.
npm/app-builder-lib CVE-2026-54672: high 7.8
electron-updater: Uncontrolled search path elements within `AppImage` built by `app-builder-lib`
Action: Upgrade app-builder-lib to 26.15.0 or later.
npm i app-builder-lib@26.15.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 26.15.0 | - |
Fixed versions
| 26.15.0 |
Sources
- osv: GHSA-7g7r-gx96-252g
- https://github.com/electron-userland/electron-builder/security/advisories/GHSA-7g7r-gx96-252g
- https://nvd.nist.gov/vuln/detail/CVE-2026-54672
- https://github.com/electron-userland/electron-builder/commit/01b8ba979d1db44543e18d07b4ad94953deb10ea
- https://github.com/electron-userland/electron-builder
- https://github.com/electron-userland/electron-builder/releases/tag/electron-builder@26.15.0
CVE-2026-54672 · published · modified · JSON