https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 14:36:18 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-331689 EUVD-2026-331689 https://cve.radiocsirt.org/vuln/euvd-2026-331689 https://cve.radiocsirt.org/vuln/fkie_cve-2026-54672 <p>electron-updater allows for automatic updates for Electron apps. Prior to 26.15.0, AppImage targets built by app-builder-lib could use an empty path component when setting the LD_LIBRARY_PATH environment variable at runtime. This causes the current working directory to be added to the dynamic linker search path, which may allow an attacker to execute arbitrary code by placing a malicious shared library in the directory from which the AppImage is launched. This issue has been fixed in version 26.15.0.</p> <p>electron-updater allows for automatic updates for Electron apps. Prior to 26.15.0, AppImage targets built by app-builder-lib could use an empty path component when setting the LD_LIBRARY_PATH environment variable at runtime. This causes the current working directory to be added to the dynamic linker search path, which may allow an attacker to execute arbitrary code by placing a malicious shared library in the directory from which the AppImage is launched. This issue has been fixed in version 26.15.0.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-54672 https://cve.radiocsirt.org/vuln/ghsa-7g7r-gx96-252g <p><strong>Affected:</strong> npm: app-builder-lib</p> <p>### Summary</p> <p>`AppImage` targets built by `app-builder-lib` could use an empty path component when setting the `LD_LIBRARY_PATH` environment variable at runtime. This causes the current working directory to be added to the dynamic linker search path, which may allow an attacker to execute arbitrary code by placing a malicious shared library in the directory from which the `AppImage` is launched.</p> <p>This vulnerability is the same class as [`CVE-2024-41817`](https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-8rxc-922v-phg8).</p> <p>### Details</p> <p>The vulnerability existed in two independent code paths within `app-builder-lib` (toolset `1.0.0`) and through upstream dependency `app-builder-bin` (toolset `0.0.0`).</p> <p>#### Path 1 — Modern static runtime (`AppRun` generated by TypeScript)</p> <p>The `AppRun` script generated by `app-builder-lib` contained this line:</p> <p>```bash export LD_LIBRARY_PATH=&#34;${APPDIR}/usr/lib:${LD_LIBRARY_PATH}&#34; ```</p> <p>When `LD_LIBRARY_PATH` is not set in the environment at launch time, this evaluates to:</p> <p>``` /path/to/app.AppDir/usr/lib: ```</p> <p>The trailing `:` is treated by the dynamic linker as an empty path component, which resolves to the current working directory. If an attacker can place a malicious shared library (e.g., `libfoo.so`) in the directory from which the `AppImage` is executed, that library will be loaded in place of the legitimate one, resulting in arbitrary code execution.</p> <p>The same issue affected `PATH`, `XDG_DATA_DIRS`, and `GSETTINGS_SCHEMA_…</p> <p><strong>Affected:</strong> npm: app-builder-lib</p> <p>### Summary</p> <p>`AppImage` targets built by `app-builder-lib` could use an empty path component when setting the `LD_LIBRARY_PATH` environment variable at runtime. This causes the current working directory to be added to the dynamic linker search path, which may allow an attacker to execute arbitrary code by placing a malicious shared library in the directory from which the `AppImage` is launched.</p> <p>This vulnerability is the same class as [`CVE-2024-41817`](https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-8rxc-922v-phg8).</p> <p>### Details</p> <p>The vulnerability existed in two independent code paths within `app-builder-lib` (toolset `1.0.0`) and through upstream dependency `app-builder-bin` (toolset `0.0.0`).</p> <p>#### Path 1 — Modern static runtime (`AppRun` generated by TypeScript)</p> <p>The `AppRun` script generated by `app-builder-lib` contained this line:</p> <p>```bash export LD_LIBRARY_PATH=&#34;${APPDIR}/usr/lib:${LD_LIBRARY_PATH}&#34; ```</p> <p>When `LD_LIBRARY_PATH` is not set in the environment at launch time, this evaluates to:</p> <p>``` /path/to/app.AppDir/usr/lib: ```</p> <p>The trailing `:` is treated by the dynamic linker as an empty path component, which resolves to the current working directory. If an attacker can place a malicious shared library (e.g., `libfoo.so`) in the directory from which the `AppImage` is executed, that library will be loaded in place of the legitimate one, resulting in arbitrary code execution.</p> <p>The same issue affected `PATH`, `XDG_DATA_DIRS`, and `GSETTINGS_SCHEMA_…</p> https://cve.radiocsirt.org/vuln/ghsa-7g7r-gx96-252g https://cve.radiocsirt.org/vuln/opensuse-su-2026:11200-1 <p>heroic-games-launcher-2.22.0-4.1 on GA media</p> <p>heroic-games-launcher-2.22.0-4.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2026:11200-1