HIGH8.8npm
GHSA-fwf6-j56g-m97c· CVE-2026-43941Electerm has an unvalidated shell.openExternal that allows arbitrary protocol execution via terminal link click
Modified: 5/8/2026
package
npm/electerm
pkg:npm/electerm
MEDIUMnpm
GHSA-g29v-q6h7-76wh· CVE-2026-45787electerm's encrypt method not safe enough
Modified: 6/9/2026
MEDIUM6.5npm
GHSA-37j4-88rp-2f6h· CVE-2026-43942Electerm's full process.env exposed to renderer via window.pre.env
Modified: 5/8/2026
HIGH7.1npm
GHSA-38j7-23hf-9mhc· CVE-2026-49253electerm has Path Traversal in Zmodem and Trzsz Download Filename Handling
Modified: 7/2/2026
HIGH7.8npm
GHSA-7p5m-v798-f8vv· CVE-2026-45353Electerm Local code through electerm's single-instance socket
Modified: 7/6/2026
CRITICAL9.8npm
GHSA-8x35-hph8-37hq· CVE-2026-41501electerm has Command Injection via runLinux funtion
Modified: 5/12/2026
CRITICAL9.8npm
GHSA-f77v-9vpc-6pjm· CVE-2026-43940Electerm runWidget has a path traversal that leads to arbitrary code execution
Modified: 5/8/2026
CRITICALnpm
GHSA-jgg9-rw32-44pj· CVE-2026-45058Electerm: Importing unsafe bookmark data could lead to unsafe operation when clicking local type bookmark
Modified: 6/9/2026
CRITICAL9.6npm
GHSA-mpm8-cx2p-626q· CVE-2026-43944Electerm users can run dangrous code through link or command line
Modified: 5/13/2026
HIGH8.8npm
GHSA-q4p8-8j9m-8hxj· CVE-2026-43943Electerm Security Vulnerability: RCE via malicious SSH server filename in openFileWithEditor
Modified: 5/8/2026
HIGH8.8npm
GHSA-v5ff-xmfp-p245· CVE-2026-49255electerm has Command Injection in File System Operations (rmrf, mv, cp)
Modified: 7/2/2026
CRITICAL9.8npm
GHSA-wxw2-rwmh-vr8f· CVE-2026-41500electerm: electerm_install_script_CommandInjection Vulnerability Report
Modified: 5/11/2026
CRITICAL9.8npm
GHSA-x73w-g8hx-v7rp· CVE-2020-23256electerm allows unauthorized users to execute arbitrary commands
Modified: 5/20/2026