Medium
CVE-2022-41710
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 102
Reset filters
High
CVE-2022-41709
Markdownify subject to Remote Code Execution via malicious markdown file
Medium
CVE-2022-29257
AutoUpdater module fails to validate certain nested components of the bundle
Low
CVE-2022-29247
Compromised child renderer processes could obtain IPC access without nodeIntegrationInSubFrames being enabled
Critical
CVE-2019-17625
Rambox RCE Vulnerability
High
CVE-2017-12581
Electron vulnerable to remote command execution
Medium
CVE-2017-1000424
Electron vulnerable to URL spoofing via PDFium
Low
CVE-2022-21718
Renderers can obtain access to random bluetooth device without permission in Electron
High
ghsa-v3wr-67px-44xg
Execution with Unnecessary Privileges in arc-electron
Medium
CVE-2021-33041
Cross-site Scripting in vmd
Critical
CVE-2021-44685
Command injection in git-it-electron
Medium
CVE-2021-39184
Electron's sandboxed renderers can obtain thumbnails of arbitrary files through the nativeImage API
Medium
CVE-2020-26272
IPC messages delivered to the wrong frame in Electron
Medium
ghsa-7wwv-vh3v-89cq
ReDOS vulnerabities: multiple grammars
Low
CVE-2020-15215
Context isolation bypass in Electron
High
CVE-2020-15174
Unpreventable top-level navigation
Critical
ghsa-j8qr-rvcv-crhv
Malicious Package in electron-native-notify
Critical
ghsa-9x64-5r7x-2q53
Malicious Package in flatmap-stream
Medium
CVE-2020-4075
Arbitrary file read via window-open IPC in Electron
High
CVE-2020-4077
Context isolation bypass via contextBridge in Electron
High
CVE-2020-4076
Context isolation bypass via leaked cross-context objects in Electron
Low
CVE-2020-15096
Context isolation bypass via Promise in Electron
High
CVE-2020-4038
Reflected XSS in GraphQL Playground
Low
CVE-2016-10534
SSL Validation Defaults to False in electron-packager
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.