Electerm: Importing unsafe bookmark data could lead to unsafe operation when clicking local type bookmark

Description

No description available.

Recommendation

No fix is available yet. Followings are affected versions:

• <= 3.8.8

References

• GHSA-jgg9-rw32-44pj
• CVE-2026-45058
• CWE-345
• CWE-494
• CWE-915
• CWE-94
• CAPEC-310
• OWASP 2021-A3
• OWASP 2021-A6
• OWASP 2021-A8

Related Issues

• Electerm Local code through electerm's single-instance socket - CVE-2026-45353
• Parse Server: GraphQL `__type` introspection bypass via inline fragments when public introspection is disabled - CVE-2026-30854
• Axios: CRLF Injection in multipart/form-data body via unsanitized blob.type in formDataToStream - CVE-2026-42037
• Undici vulnerable to data leak when using response.arrayBuffer() - CVE-2024-38372

You might also like:

How to Secure your NodeJs Express Javascript Application - part 1

How to Secure your NodeJs Express Javascript Application - part 2

10 Secure Coding Best Practices to Follow in Every Project

Tags:

npm

electerm