Skip to content
OpenAdvisories

Package · npm

electron-updater

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 7.5
    CVE-2024-39698

    Code Signing Bypass on Windows in electron-updater < 6.3.0-alpha.6

    electron-updater allows for automatic updates for Electron apps. The file `packages/electron-updater/src/windowsExecutableCodeSignatureVerifier.ts` implements the signature validation routine for Electron applications on Windows. Because of the surrounding sh…

    electron-userland electron-builder electron-updater npm