An open index of dependabot pull requests across open source projects.

electron

Ecosystem:
npm
Package URL:
pkg:npm/electron
Total PRs:
12,340 Dependabot PRs
Latest PR:
3 days ago
Unique Repositories:
3,578 repositories
Unique Repos (30 days):
20 repositories
Security Advisories
Electron: Use-after-free in offscreen child window paint callback
GHSA-532v-xpq5-8h95 CVE-2026-34774 HIGH published 4 months ago • updated 14 days ago
### Impact Apps that use offscreen rendering and allow child windows via `window.open()` may be vulnerable to a use-after-free. If the parent offsc...
Renderers can obtain access to random bluetooth device without permission in Electron
GHSA-3p22-ghq8-v749 CVE-2022-21718 LOW published over 4 years ago • updated 34 minutes ago
### Impact This vulnerability allows renderers to obtain access to a random bluetooth device via the [web bluetooth API](https://developer.mozilla....
ASAR Integrity bypass via filetype confusion in electron
GHSA-7m48-wc93-9g85 CVE-2023-44402 MODERATE published over 2 years ago • updated 3 days ago
### Impact This only impacts apps that have the `embeddedAsarIntegrityValidation` and `onlyLoadAppFromAsar` [fuses](https://www.electronjs.org/docs...
Heap buffer overflow in GPU
GHSA-995f-9x5r-2rcj CVE-2022-4135 CRITICAL published over 3 years ago • updated about 1 month ago
Heap buffer overflow in GPU in Google Chrome prior to 107.0.5304.121 allowed a remote attacker who had compromised the renderer process to potentia...
Electron: nodeIntegrationInWorker not correctly scoped in shared renderer processes
GHSA-xwr5-m59h-vwqr CVE-2026-34775 MODERATE published 4 months ago • updated about 18 hours ago
### Impact The `nodeIntegrationInWorker` webPreference was not correctly scoped in all configurations. In certain process-sharing scenarios, worker...
Recent PRs
Bump electron from 31.7.7 to 42.5.0

sgrpanchal31/vidura #25

31.7.7 → 42.5.0 Major PR
Open about 1 month ago 1 comment
sgrpanchal31
Package Details
Name: electron
Ecosystem: npm
PURL Type: npm
Package URL: pkg:npm/electron
JSON API: View JSON
Security Advisories

48

Active advisories
CRITICAL 3
HIGH 18
MODERATE 19
LOW 8
View All npm Advisories
Package Information
Description:

Build cross platform desktop apps with JavaScript, HTML, and CSS

Repository: https://github.com/electron/electron
Homepage: https://github.com/electron/electron
Latest Release: 33.2.1
over 1 year ago
Dependent Repos: 93,246
Dependent Packages: 5,167
Downloads: 3,520,591
Ranking: Top 0.1097% by dependent repos Top 0.171% by downloads Top 0.0183% by dependent pkgs
PR Status
Open 4,756 (38.5%)
Merged 975 (7.9%)
Closed 5,804 (47.0%)
PR Types
Major 8,373 (67.9%)
Minor 2,144 (17.4%)
Patch 1,006 (8.2%)
Removal 3 (0.0%)