Skip to content
OpenAdvisories

Product · electron-userland

app-builder-lib

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.8
    CVE-2026-54672

    electron-updater: Uncontrolled search path elements within `AppImage` built by `app-builder-lib`

    electron-updater allows for automatic updates for Electron apps. Prior to 26.15.0, AppImage targets built by app-builder-lib could use an empty path component when setting the LD_LIBRARY_PATH environment variable at runtime. This causes the current working di…

    electron-userland electron-builder app-builder-lib app-builder-lib npm