openjsf packager vulnerabilities

Latest openjsf packager CVEs

Newest publication first

1. CVE-2024-29900 @electron/packager's build process memory potentially leaked into final executable

   Published 2024-03-29

   High·CVSS 7.5 EPSS 0.63%

   Electron Packager bundles Electron-based application source code with a renamed Electron executable and supporting files into folders ready for distribution. A random segment of ~1-10kb of Node.js heap memory allocated either side of a known buffer will be leaked into the final e...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.