| Package | Affected versions | Patched versions |
|---|---|---|
| electerm | ≥ 3.0.6, < 3.9.0 | 3.9.0 |
| electerm | ≥ 3.0.6, < 3.9.0 | 3.9.0 |
Local code execution without UI interaction: any same-user process can send a JSON payload to electerm's single-instance socket/pipe, causing the app to create tabs and potentially spawn attacker-controlled local processes. Affects electerm single-instance installs on the machine.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free