All products

electerm

npm · Package
13 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Electerm Local code through electerm's single-instance socketCVE-2026-45353 · GHSA-7P5M-V798-F8VV electerm npm Critical Fix reported
electerm has Command Injection in File System Operations (rmrf, mv, cp)CVE-2026-49255 · GHSA-V5FF-XMFP-P245 electerm npm High Fix reported
electerm has Path Traversal in Zmodem and Trzsz Download Filename HandlingCVE-2026-49253 · GHSA-38J7-23HF-9MHC electerm npm High Fix reported
electerm's encrypt method not safe enoughCVE-2026-45787 · GHSA-G29V-Q6H7-76WH electerm npm Medium Fix reported
Electerm: Importing unsafe bookmark data could lead to unsafe operation when clicking local type bookmarkCVE-2026-45058 · GHSA-JGG9-RW32-44PJ electerm npm Critical No fix reported
electerm allows unauthorized users to execute arbitrary commandsCVE-2020-23256 · GHSA-X73W-G8HX-V7RP electerm npm Critical No fix reported
Electerm users can run dangrous code through link or command lineCVE-2026-43944 · GHSA-MPM8-CX2P-626Q electerm npm Critical Fix reported
electerm has Command Injection via runLinux funtionCVE-2026-41501 · GHSA-8X35-HPH8-37HQ electerm npm Critical Fix reported
electerm: electerm_install_script_CommandInjection Vulnerability ReportCVE-2026-41500 · GHSA-WXW2-RWMH-VR8F electerm npm Critical Fix reported
Electerm Security Vulnerability: RCE via malicious SSH server filename in openFileWithEditorCVE-2026-43943 · GHSA-Q4P8-8J9M-8HXJ electerm npm High Fix reported
Electerm runWidget has a path traversal that leads to arbitrary code executionCVE-2026-43940 · GHSA-F77V-9VPC-6PJM electerm npm Critical Fix reported
Electerm's full process.env exposed to renderer via window.pre.envCVE-2026-43942 · GHSA-37J4-88RP-2F6H electerm npm Medium No fix reported
Electerm has an unvalidated shell.openExternal that allows arbitrary protocol execution via terminal link clickCVE-2026-43941 · GHSA-FWF6-J56G-M97C electerm npm High No fix reported