AIKIDO-2024-10176
electron is vulnerable to Type Confusion
85
High Risk
This Affects:
electronTL;DR
Type confusion in V8 in Google Chrome prior to 126.0.6478 allows a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: High). This issue is fixed along with other security improvements.
Who does this affect?
You are affected if you are using a version that falls within the vulnerable range.
Background info
electron is vulnerable to Type Confusion in versions 29.0.0 - 29.4.2 and 30.0.0 - 30.1.2.
How to fix this
Upgrade the electron library to the patch version.
Links
GitHub Release
Other
chromereleases.googleblog.com/2024/06/stable-channel-update-for-desktop_18.htmlissues.chromium.org/issues/344608204lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6HYUEHZ35ZPY2EONVZCGO6LPT3AMLZCP/lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/U5NRNCEYS246CYGOR32MF7OGKWOWER22/
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.