Skip to content
OpenAdvisories

Package · npm

app-builder-lib

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • High 7.8
    CVE-2026-54672

    electron-updater: Uncontrolled search path elements within `AppImage` built by `app-builder-lib`

    electron-updater allows for automatic updates for Electron apps. Prior to 26.15.0, AppImage targets built by app-builder-lib could use an empty path component when setting the LD_LIBRARY_PATH environment variable at runtime. This causes the current working di…

    electron-userland electron-builder app-builder-lib app-builder-lib npm
  • High 7.3
    CVE-2024-27303

    electron-builder's NSIS installer - execute arbitrary code on the target machine (Windows only)

    electron-builder is a solution to package and build a ready for distribution Electron, Proton Native app for macOS, Windows and Linux. A vulnerability that only affects eletron-builder prior to 24.13.2 in Windows, the NSIS installer makes a system call to ope…

    electron-userland electron-builder app-builder-lib npm