Skip to content
OpenAdvisories

Vendor

electerm

18 known vulnerabilities.

Products

electerm 18
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.0
    CVE-2026-45787

    electerm's encrypt method not safe enough

    electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to 3.9.5, deterministic AES-192-CBC with a fixed zero IV, constant KDF salt, and no MAC leads to confidentiality and integrity failures for synced bookmark/profile…

    electerm electerm electerm npm
  • Medium 5.5
    CVE-2026-43942

    electerm: Full process.env exposed to renderer via window.pre.env in electerm

    electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. In versions 3.8.15 and prior, the getConstants() IPC handler in src/app/lib/ipc-sync.js serialises the entire process.env object and sends it to the renderer. The data i…

    electerm electerm electerm npm