Electerm: Importing unsafe bookmark data could lead to unsafe operation when clicking local type bookmark
- Severity:
- High
Description
No description available.
Recommendation
No fix is available yet. Followings are affected versions:
- <= 3.8.8
References
- GHSA-jgg9-rw32-44pj
- CVE-2026-45058
- CWE-345
- CWE-494
- CWE-915
- CWE-94
- CAPEC-310
- OWASP 2021-A3
- OWASP 2021-A6
- OWASP 2021-A8
Related Issues
- Electerm Local code through electerm's single-instance socket - CVE-2026-45353
- Axios: CRLF Injection in multipart/form-data body via unsanitized blob.type in formDataToStream - CVE-2026-42037
- Handlebars.js has JavaScript Injection via AST Type Confusion when passing an object as dynamic partial - CVE-2026-33940
- tarteaucitron: data-cookie attribute can be used to delete arbitrary cookies - CVE-2026-49977
You might also like:
- Tags:
- npm
- electerm
Anything's wrong? Let us know Last updated on June 09, 2026