https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 13:22:21 +0000 https://cve.radiocsirt.org/vuln/cve-2021-39184 <p><strong>Affected:</strong> electron</p> <p>Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. A vulnerability in versions prior to 11.5.0, 12.1.0, and 13.3.0 allows a sandboxed renderer to request a &#34;thumbnail&#34; image of an arbitrary file on the user&#39;s system. The thumbnail can potentially include significant parts of the original file, including textual data in many cases. Versions 15.0.0-alpha.10, 14.0.0, 13.3.0, 12.1.0, and 11.5.0 all contain a fix for the vulnerability. Two workarounds aside from upgrading are available. One may make the vulnerability significantly more difficult for an attacker to exploit by enabling `contextIsolation` in one&#39;s app. One may also disable the functionality of the `createThumbnailFromPath` API if one does not need it.</p> <p><strong>Affected:</strong> electron</p> <p>Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. A vulnerability in versions prior to 11.5.0, 12.1.0, and 13.3.0 allows a sandboxed renderer to request a &#34;thumbnail&#34; image of an arbitrary file on the user&#39;s system. The thumbnail can potentially include significant parts of the original file, including textual data in many cases. Versions 15.0.0-alpha.10, 14.0.0, 13.3.0, 12.1.0, and 11.5.0 all contain a fix for the vulnerability. Two workarounds aside from upgrading are available. One may make the vulnerability significantly more difficult for an attacker to exploit by enabling `contextIsolation` in one&#39;s app. One may also disable the functionality of the `createThumbnailFromPath` API if one does not need it.</p> https://cve.radiocsirt.org/vuln/cve-2021-39184