electron-userland/electron-builder Security Advisories | GitStock

high2026-07-24

electron-updater: Cross-origin redirect leaks `PRIVATE-TOKEN` and mixed-case `Authorization` credentials in `builder-util-runtime`

GHSA-p2f4-r6v6-j797 · CVE-2026-54673

high2026-07-24

electron-updater: Uncontrolled search path elements within `AppImage` built by `app-builder-lib`

GHSA-7g7r-gx96-252g · CVE-2026-54672

high2024-07-09

electron-updater Code Signing Bypass on Windows

GHSA-9jxc-qjr9-vjxq · CVE-2024-39698

high2024-03-04

electron-builder's NSIS installer - execute arbitrary code on the target machine (Windows only)

GHSA-r4pf-3v7r-hh55 · CVE-2024-27303