| Package | Affected versions | Patched versions |
|---|---|---|
| desktop | = 2.1.0 |
Asana Desktop 2.1.0 on macOS allows code injection because of specific Electron Fuses. There is inadequate protection against code injection through settings such as RunAsNode and EnableNodeCliInspectArguments, and thus r3ggi/electroniz3r can be used to perform an attack.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free