{"action":"Upgrade electron-updater to 6.3.0-alpha.6 or later.","affected":[{"fixed":"6.3.0-alpha.6","introduced":"0"}],"component":"electron-updater","cve_ids":["CVE-2024-39698"],"ecosystem":"npm","epss":0.00425,"exploited":false,"fixed_versions":["6.3.0-alpha.6"],"ghsa_id":"GHSA-9jxc-qjr9-vjxq","id":"tcs_01M5KFG5E92QT5034NF3SZTEV1","modified_at":"2026-09-10T03:50:16.404416823Z","published_at":"2024-07-09T17:48:21Z","references":["https://osv.dev/vulnerability/GHSA-9jxc-qjr9-vjxq","https://github.com/electron-userland/electron-builder/security/advisories/GHSA-9jxc-qjr9-vjxq","https://nvd.nist.gov/vuln/detail/CVE-2024-39698","https://github.com/electron-userland/electron-builder/pull/8295","https://github.com/electron-userland/electron-builder/commit/ac2e6a25aa491c1ef5167a552c19fc2085cd427f","https://github.com/electron-userland/electron-builder","https://github.com/electron-userland/electron-builder/blob/140e2f0eb0df79c2a46e35024e96d0563355fc89/packages/electron-updater/src/windowsExecutableCodeSignatureVerifier.ts#L35-L41"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-9jxc-qjr9-vjxq","url":"https://osv.dev/vulnerability/GHSA-9jxc-qjr9-vjxq"}],"summary":"electron-updater Code Signing Bypass on Windows"}