https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T07:04:20.804887+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-329653 EUVD-2026-329653 2026-10-09T07:04:20.807516+00:00 EUVD-2026-329653 https://cve.radiocsirt.org/vuln/fkie_cve-2026-54257 fkie_cve-2026-54257 2026-10-09T07:04:20.807550+00:00

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. From 42.3.1 until 42.3.3, Buffer performs incorrect byte length calculations resulting in heap buffer under/overflow. Most apps will crash and some may perform incorrect buffer allocations in the Node.js Buffer API resulting in unexpected truncation or allocation. This vulnerability is fixed in 42.3.3.

 https://cve.radiocsirt.org/vuln/ghsa-q6m5-f73j-m9mc GHSA-q6m5-f73j-m9mc — Electron: Buffer performs incorrect byte length calculations resulting in heap buffer under/overflow 2026-10-09T07:04:20.807582+00:00

Affected: npm: electron

### Impact Most apps will crash and some may perform incorrect buffer allocations in the Node.js `Buffer` API resulting in unexpected truncation or allocation.

### Workarounds No workarounds. Do not use these impacted Electron releases

### Fixed Versions * `42.3.3`

### For more information If you have any questions or comments about this advisory, email us at [security@electronjs.org](mailto:security@electronjs.org)