Not analysed yet
We haven’t published our analysis of this Advisory yet. Once a person has reviewed it, this page will say what’s vulnerable, what has to be true for your app to be affected, and how to check.
Severity and exploitation
| Score | Rating | CVSS | Vector | Source |
|---|---|---|---|---|
| 6.9 | Medium | 3.1 | CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:N | CNA (GitHub_M) |
- CISA KEV Not listed.
- EPSS 0.0019, the 8th percentile, on 13 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.
Timeline
- 27 Jul 2026, 23:48 UTC Published by the maintainers as a GitHub repository advisory
- 5 Aug 2026, 17:49 UTC Confirmed by the CVE List
- 5 Aug 2026, 18:17 UTC Confirmed by NVD
Sources
- GitHub Advisory Database: GHSA-f2r8-jv7c-xqmp
- OSV: GHSA-f2r8-jv7c-xqmp
- github.com/electron/electron/security/advisories/GHSA-f2r8-jv7c-xqmp
- github.com/electron/electron/pull/50937
- github.com/electron/electron/pull/50938
- github.com/electron/electron/pull/51114
- github.com/electron/electron/pull/51115
- github.com/electron/electron/commit/10fb5b39c5287f70c4bbcab4c24197f3871ec322
- github.com/electron/electron/commit/27bf1cae9274d5025684c7268496f435b7e06b44
- github.com/electron/electron/commit/7a1eb7e5585991b3726cedb890a6244f327f43de
- github.com/electron/electron
- github.com/electron/electron/releases/tag/v39.8.9
- github.com/electron/electron/releases/tag/v40.9.2
- github.com/electron/electron/releases/tag/v41.2.1