HIGHnpm
GHSA-p2f4-r6v6-j797· CVE-2026-54673electron-updater: Cross-origin redirect leaks `PRIVATE-TOKEN` and mixed-case `Authorization` credentials in `builder-util-runtime`
Modified: 7/24/2026
package
npm/builder-util-runtime
pkg:npm/builder-util-runtime