NodeJS/electron/31.0.0-alpha.5
Build cross platform desktop apps with JavaScript, HTML, and CSS
https://www.npmjs.com/package/electron
MIT
2 Security Vulnerabilities
Electron has ASAR Integrity Bypass via resource modification
Published date: 2025-09-03T21:27:37Z
CVE: CVE-2025-55305
Links:
- https://github.com/electron/electron/security/advisories/GHSA-vmqv-hx8q-j7mg
- https://github.com/electron/electron/pull/48101
- https://github.com/electron/electron/pull/48102
- https://github.com/electron/electron/pull/48103
- https://github.com/electron/electron/pull/48104
- https://github.com/electron/electron/commit/23a02934510fcf951428e14573d9b2d2a3c4f28b
- https://github.com/electron/electron/commit/2e5a0b7220ebf955c6785cc5adb2e2b1cf77dac1
- https://github.com/electron/electron/commit/3f92511cdecc39f46b0e86cce40a0c691e301c9d
- https://github.com/electron/electron/commit/fdf29ce83870109d403f5c23ae529dbd0e8f4fee
- https://nvd.nist.gov/vuln/detail/CVE-2025-55305
- https://github.com/advisories/GHSA-vmqv-hx8q-j7mg
Impact
This only impacts apps that have the embeddedAsarIntegrityValidation and onlyLoadAppFromAsar fuses enabled. Apps without these fuses enabled are not impacted.
Specifically this issue can only be exploited if your app is launched from a filesystem the attacker has write access too. i.e. the ability to edit files inside the resources folder in your app installation on Windows which these fuses are supposed to protect against.
Workarounds
There are no app side workarounds, you must update to a patched version of Electron.
Fixed Versions
38.0.0-beta.637.3.136.8.135.7.5
For more information
If you have any questions or comments about this advisory, email us at security@electronjs.org
Affected versions: ["38.0.0-beta.5", "38.0.0-beta.4", "38.0.0-beta.3", "38.0.0-beta.2", "38.0.0-beta.1", "38.0.0-alpha.13", "38.0.0-alpha.12", "38.0.0-alpha.11", "38.0.0-alpha.10", "38.0.0-alpha.9", "38.0.0-alpha.8", "38.0.0-alpha.7", "38.0.0-alpha.6", "38.0.0-alpha.5", "38.0.0-alpha.4", "38.0.0-alpha.3", "38.0.0-alpha.2", "38.0.0-alpha.1", "37.3.0", "37.2.6", "37.2.5", "37.2.4", "37.2.3", "37.2.2", "37.2.1", "37.2.0", "37.1.0", "37.0.0", "37.0.0-beta.9", "37.0.0-beta.8", "37.0.0-beta.7", "37.0.0-beta.6", "37.0.0-beta.5", "37.0.0-beta.4", "37.0.0-beta.3", "37.0.0-beta.2", "37.0.0-beta.1", "37.0.0-alpha.7", "37.0.0-alpha.6", "37.0.0-alpha.5", "37.0.0-alpha.4", "37.0.0-alpha.3", "37.0.0-alpha.2", "37.0.0-alpha.1", "36.8.0", "36.7.4", "36.7.3", "36.7.1", "36.7.0", "36.6.0", "36.5.0", "36.4.0", "36.3.2", "36.3.1", "36.3.0", "36.2.1", "36.2.0", "36.1.0", "36.0.1", "36.0.0", "36.0.0-beta.9", "36.0.0-beta.8", "36.0.0-beta.7", "36.0.0-beta.6", "36.0.0-beta.5", "36.0.0-beta.4", "36.0.0-beta.3", "36.0.0-beta.2", "36.0.0-beta.1", "36.0.0-alpha.6", "36.0.0-alpha.5", "36.0.0-alpha.4", "36.0.0-alpha.3", "36.0.0-alpha.2", "36.0.0-alpha.1", "35.7.4", "35.7.2", "35.7.0", "35.6.0", "35.5.1", "35.5.0", "35.4.0", "35.3.0", "35.2.2", "35.2.1", "35.2.0", "35.1.5", "35.1.4", "35.1.3", "35.1.2", "35.1.1", "35.1.0", "35.0.3", "35.0.2", "35.0.1", "35.0.0", "35.0.0-beta.13", "35.0.0-beta.12", "35.0.0-beta.11", "35.0.0-beta.10", "35.0.0-beta.9", "35.0.0-beta.8", "35.0.0-beta.7", "35.0.0-beta.6", "35.0.0-beta.5", "35.0.0-beta.4", "35.0.0-beta.3", "35.0.0-beta.2", "35.0.0-beta.1", "35.0.0-alpha.5", "35.0.0-alpha.4", "35.0.0-alpha.3", "35.0.0-alpha.2", "35.0.0-alpha.1", "34.5.8", "34.5.7", "34.5.6", "34.5.5", "34.5.4", "34.5.3", "34.5.2", "34.5.1", "34.5.0", "34.4.1", "34.4.0", "34.3.4", "34.3.3", "34.3.2", "34.3.1", "34.3.0", "34.2.0", "34.1.1", "34.1.0", "34.0.2", "34.0.1", "34.0.0", "34.0.0-beta.16", "34.0.0-beta.15", "34.0.0-beta.14", "34.0.0-beta.13", "34.0.0-beta.12", "34.0.0-beta.11", "34.0.0-beta.10", "34.0.0-beta.9", "34.0.0-beta.8", "34.0.0-beta.7", "34.0.0-beta.6", "34.0.0-beta.5", "34.0.0-beta.4", "34.0.0-beta.3", "34.0.0-beta.2", "34.0.0-beta.1", "34.0.0-alpha.9", "34.0.0-alpha.8", "34.0.0-alpha.7", "34.0.0-alpha.6", "34.0.0-alpha.5", "34.0.0-alpha.4", "34.0.0-alpha.3", "34.0.0-alpha.2", "34.0.0-alpha.1", "33.4.11", "33.4.10", "33.4.9", "33.4.8", "33.4.7", "33.4.6", "33.4.5", "33.4.4", "33.4.3", "33.4.2", "33.4.1", "33.4.0", "33.3.2", "33.3.1", "33.3.0", "33.2.1", "33.2.0", "33.1.0", "33.0.2", "33.0.1", "33.0.0", "33.0.0-beta.11", "33.0.0-beta.10", "33.0.0-beta.9", "33.0.0-beta.8", "33.0.0-beta.7", "33.0.0-beta.6", "33.0.0-beta.5", "33.0.0-beta.4", "33.0.0-beta.3", "33.0.0-beta.2", "33.0.0-beta.1", "33.0.0-alpha.6", "33.0.0-alpha.5", "33.0.0-alpha.4", "33.0.0-alpha.3", "33.0.0-alpha.2", "33.0.0-alpha.1", "32.3.3", "32.3.2", "32.3.1", "32.3.0", "32.2.8", "32.2.7", "32.2.6", "32.2.5", "32.2.4", "32.2.3", "32.2.2", "32.2.1", "32.2.0", "32.1.2", "32.1.1", "32.1.0", "32.0.2", "32.0.1", "32.0.0", "32.0.0-beta.7", "32.0.0-beta.6", "32.0.0-beta.5", "32.0.0-beta.4", "32.0.0-beta.3", "32.0.0-beta.2", "32.0.0-beta.1", "32.0.0-alpha.10", "32.0.0-alpha.9", "32.0.0-alpha.8", "32.0.0-alpha.7", "32.0.0-alpha.6", "32.0.0-alpha.5", "32.0.0-alpha.4", "32.0.0-alpha.3", "32.0.0-alpha.2", "32.0.0-alpha.1", "31.7.7", "31.7.6", "31.7.5", "31.7.4", "31.7.3", "31.7.2", "31.7.1", "31.7.0", "31.6.0", "31.5.0", "31.4.0", "31.3.1", "31.3.0", "31.2.1", "31.2.0", "31.1.0", "31.0.2", "31.0.1", "31.0.0", "31.0.0-beta.10", "31.0.0-beta.9", "31.0.0-beta.8", "31.0.0-beta.7", "31.0.0-beta.6", "31.0.0-beta.5", "31.0.0-beta.4", "31.0.0-beta.3", "31.0.0-beta.2", "31.0.0-beta.1", "31.0.0-alpha.5", "31.0.0-alpha.4", "31.0.0-alpha.3", "31.0.0-alpha.2", "31.0.0-alpha.1", "30.5.1", "30.5.0", "30.4.0", "30.3.1", "30.3.0", "30.2.0", "30.1.2", "30.1.1", "30.1.0", "30.0.9", "30.0.8", "30.0.7", "30.0.6", "30.0.5", "30.0.4", "30.0.3", "30.0.2", "30.0.1", "30.0.0", "30.0.0-beta.8", "30.0.0-beta.7", "30.0.0-beta.6", "30.0.0-beta.5", "30.0.0-beta.4", "30.0.0-beta.3", "30.0.0-beta.2", "30.0.0-beta.1", "30.0.0-alpha.7", "30.0.0-alpha.6", "30.0.0-alpha.5", "30.0.0-alpha.4", "30.0.0-alpha.3", "30.0.0-alpha.2", "30.0.0-alpha.1", "29.4.6", "29.4.5", "29.4.3", "29.4.2", "29.4.1", "29.4.0", "29.3.3", "29.3.2", "29.3.1", "29.3.0", "29.2.0", "29.1.6", "29.1.5", "29.1.4", "29.1.3", "29.1.2", "29.1.1", "29.1.0", "29.0.1", "29.0.0", "29.0.0-beta.12", "29.0.0-beta.11", "29.0.0-beta.10", "29.0.0-beta.9", "29.0.0-beta.8", "29.0.0-beta.7", "29.0.0-beta.6", "29.0.0-beta.5", "29.0.0-beta.4", "29.0.0-beta.3", "29.0.0-beta.2", "29.0.0-beta.1", "29.0.0-alpha.11", "29.0.0-alpha.10", "29.0.0-alpha.9", "29.0.0-alpha.8", "29.0.0-alpha.7", "29.0.0-alpha.6", "29.0.0-alpha.5", "29.0.0-alpha.4", "29.0.0-alpha.3", "29.0.0-alpha.2", "29.0.0-alpha.1", "28.3.3", "28.3.2", "28.3.1", "28.3.0", "28.2.10", "28.2.9", "28.2.8", "28.2.7", "28.2.6", "28.2.5", "28.2.4", "28.2.3", "28.2.2", "28.2.1", "28.2.0", "28.1.4", "28.1.3", "28.1.2", "28.1.1", "28.1.0", "28.0.0", "28.0.0-beta.11", "28.0.0-beta.10", "28.0.0-beta.9", "28.0.0-beta.8", "28.0.0-beta.7", "28.0.0-beta.6", "28.0.0-beta.5", "28.0.0-beta.4", "28.0.0-beta.3", "28.0.0-beta.2", "28.0.0-beta.1", "28.0.0-alpha.7", "28.0.0-alpha.6", "28.0.0-alpha.5", "28.0.0-alpha.4", "28.0.0-alpha.3", "28.0.0-alpha.2", "28.0.0-alpha.1", "27.3.11", "27.3.10", "27.3.9", "27.3.8", "27.3.7", "27.3.6", "27.3.5", "27.3.4", "27.3.3", "27.3.2", "27.3.1", "27.3.0", "27.2.4", "27.2.3", "27.2.2", "27.2.1", "27.2.0", "27.1.3", "27.1.2", "27.1.0", "27.0.4", "27.0.3", "27.0.2", "27.0.1", "27.0.0", "27.0.0-beta.9", "27.0.0-beta.8", "27.0.0-beta.7", "27.0.0-beta.6", "27.0.0-beta.5", "27.0.0-beta.4", "27.0.0-beta.3", "27.0.0-beta.2", "27.0.0-beta.1", "27.0.0-alpha.6", "27.0.0-alpha.5", "27.0.0-alpha.4", "27.0.0-alpha.3", "27.0.0-alpha.2", "27.0.0-alpha.1", "26.6.10", "26.6.9", "26.6.8", "26.6.7", "26.6.6", "26.6.5", "26.6.4", "26.6.3", "26.6.2", "26.6.1", "26.6.0", "26.5.0", "26.4.3", "26.4.2", "26.4.1", "26.4.0", "26.3.0", "26.2.4", "26.2.3", "26.2.2", "26.2.1", "26.2.0", "26.1.0", "26.0.0", "26.0.0-beta.12", "26.0.0-beta.11", "26.0.0-beta.10", "26.0.0-beta.9", "26.0.0-beta.8", "26.0.0-beta.7", "26.0.0-beta.6", "26.0.0-beta.5", "26.0.0-beta.4", "26.0.0-beta.3", "26.0.0-beta.2", "26.0.0-beta.1", "26.0.0-alpha.8", "26.0.0-alpha.7", "26.0.0-alpha.6", "26.0.0-alpha.5", "26.0.0-alpha.4", "26.0.0-alpha.3", "26.0.0-alpha.2", "26.0.0-alpha.1", "25.9.8", "25.9.7", "25.9.6", "25.9.5", "25.9.4", "25.9.3", "25.9.2", "25.9.1", "25.9.0", "25.8.4", "25.8.3", "25.8.2", "25.8.1", "25.8.0", "25.7.0", "25.6.0", "25.5.0", "25.4.0", "25.3.2", "25.3.1", "25.3.0", "25.2.0", "25.1.1", "25.1.0", "25.0.1", "25.0.0", "25.0.0-beta.8", "25.0.0-beta.7", "25.0.0-beta.6", "25.0.0-beta.5", "25.0.0-beta.4", "25.0.0-beta.3", "25.0.0-beta.2", "25.0.0-beta.1", "25.0.0-alpha.6", "25.0.0-alpha.5", "25.0.0-alpha.4", "25.0.0-alpha.3", "25.0.0-alpha.2", "25.0.0-alpha.1", "24.8.8", "24.8.7", "24.8.6", "24.8.5", "24.8.4", "24.8.3", "24.8.2", "24.8.1", "24.8.0", "24.7.1", "24.7.0", "24.6.5", "24.6.4", "24.6.3", "24.6.2", "24.6.1", "24.6.0", "24.5.1", "24.5.0", "24.4.1", "24.4.0", "24.3.1", "24.3.0", "24.2.0", "24.1.3", "24.1.2", "24.1.1", "24.1.0", "24.0.0", "24.0.0-beta.7", "24.0.0-beta.6", "24.0.0-beta.5", "24.0.0-beta.4", "24.0.0-beta.3", "24.0.0-beta.2", "24.0.0-beta.1", "24.0.0-alpha.7", "24.0.0-alpha.6", "24.0.0-alpha.5", "24.0.0-alpha.4", "24.0.0-alpha.3", "24.0.0-alpha.2", "24.0.0-alpha.1", "23.3.13", "23.3.12", "23.3.11", "23.3.10", "23.3.9", "23.3.8", "23.3.7", "23.3.6", "23.3.5", "23.3.4", "23.3.3", "23.3.2", "23.3.1", "23.3.0", "23.2.4", "23.2.3", "23.2.2", "23.2.1", "23.2.0", "23.1.4", "23.1.3", "23.1.2", "23.1.1", "23.1.0", "23.0.0", "23.0.0-beta.8", "23.0.0-beta.6", "23.0.0-beta.5", "23.0.0-beta.4", "23.0.0-beta.3", "23.0.0-beta.2", "23.0.0-beta.1", "23.0.0-alpha.3", "23.0.0-alpha.2", "23.0.0-alpha.1", "22.3.27", "22.3.26", "22.3.25", "22.3.24", "22.3.23", "22.3.22", "22.3.21", "22.3.18", "22.3.17", "22.3.16", "22.3.15", "22.3.14", "22.3.13", "22.3.12", "22.3.11", "22.3.10", "22.3.9", "22.3.8", "22.3.7", "22.3.6", "22.3.5", "22.3.4", "22.3.3", "22.3.2", "22.3.1", "22.3.0", "22.2.1", "22.2.0", "22.1.0", "22.0.3", "22.0.2", "22.0.1", "22.0.0", "22.0.0-beta.8", "22.0.0-beta.7", "22.0.0-beta.6", "22.0.0-beta.5", "22.0.0-beta.4", "22.0.0-beta.3", "22.0.0-beta.2", "22.0.0-beta.1", "22.0.0-alpha.8", "22.0.0-alpha.7", "22.0.0-alpha.6", "22.0.0-alpha.5", "22.0.0-alpha.4", "22.0.0-alpha.3", "22.0.0-alpha.1", "21.4.4", "21.4.3", "21.4.2", "21.4.1", "21.4.0", "21.3.5", "21.3.4", "21.3.3", "21.3.1", "21.3.0", "21.2.3", "21.2.2", "21.2.1", "21.2.0", "21.1.1", "21.1.0", "21.0.1", "21.0.0", "21.0.0-beta.8", "21.0.0-beta.7", "21.0.0-beta.6", "21.0.0-beta.5", "21.0.0-beta.4", "21.0.0-beta.3", "21.0.0-beta.2", "21.0.0-beta.1", "21.0.0-alpha.6", "21.0.0-alpha.5", "21.0.0-alpha.4", "21.0.0-alpha.3", "21.0.0-alpha.2", "21.0.0-alpha.1", "20.3.12", "20.3.11", "20.3.10", "20.3.9", "20.3.8", "20.3.7", "20.3.6", "20.3.5", "20.3.4", "20.3.3", "20.3.2", "20.3.1", "20.3.0", "20.2.0", "20.1.4", "20.1.3", "20.1.2", "20.1.1", "20.1.0", "20.0.3", "20.0.2", "20.0.1", "20.0.0", "20.0.0-beta.13", "20.0.0-beta.12", "20.0.0-beta.11", "20.0.0-beta.10", "20.0.0-beta.9", "20.0.0-beta.8", "20.0.0-beta.7", "20.0.0-beta.6", "20.0.0-beta.5", "20.0.0-beta.4", "20.0.0-beta.3", "20.0.0-beta.2", "20.0.0-beta.1", "20.0.0-alpha.7", "20.0.0-alpha.6", "20.0.0-alpha.5", "20.0.0-alpha.4", "20.0.0-alpha.3", "20.0.0-alpha.2", "20.0.0-alpha.1", "19.1.9", "19.1.8", "19.1.7", "19.1.6", "19.1.5", "19.1.4", "19.1.3", "19.1.2", "19.1.1", "19.1.0", "19.0.17", "19.0.16", "19.0.15", "19.0.14", "19.0.13", "19.0.12", "19.0.11", "19.0.10", "19.0.9", "19.0.8", "19.0.7", "19.0.6", "19.0.5", "19.0.4", "19.0.3", "19.0.2", "19.0.1", "19.0.0", "19.0.0-beta.8", "19.0.0-beta.7", "19.0.0-beta.6", "19.0.0-beta.5", "19.0.0-beta.4", "19.0.0-beta.3", "19.0.0-beta.2", "19.0.0-beta.1", "19.0.0-alpha.5", "19.0.0-alpha.4", "19.0.0-alpha.3", "19.0.0-alpha.2", "19.0.0-alpha.1", "18.3.15", "18.3.14", "18.3.13", "18.3.12", "18.3.11", "18.3.9", "18.3.8", "18.3.7", "18.3.6", "18.3.5", "18.3.4", "18.3.3", "18.3.2", "18.3.1", "18.3.0", "18.2.4", "18.2.3", "18.2.2", "18.2.0", "18.1.0", "18.0.4", "18.0.3", "18.0.2", "18.0.1", "18.0.0", "18.0.0-beta.6", "18.0.0-beta.5", "18.0.0-beta.4", "18.0.0-beta.3", "18.0.0-beta.2", "18.0.0-beta.1", "18.0.0-alpha.5", "18.0.0-alpha.4", "18.0.0-alpha.3", "18.0.0-alpha.2", "18.0.0-alpha.1", "17.4.11", "17.4.10", "17.4.9", "17.4.8", "17.4.7", "17.4.6", "17.4.5", "17.4.4", "17.4.3", "17.4.2", "17.4.1", "17.4.0", "17.3.1", "17.3.0", "17.2.0", "17.1.2", "17.1.1", "17.1.0", "17.0.1", "17.0.0", "17.0.0-beta.9", "17.0.0-beta.8", "17.0.0-beta.7", "17.0.0-beta.6", "17.0.0-beta.5", "17.0.0-beta.4", "17.0.0-beta.3", "17.0.0-beta.2", "17.0.0-beta.1", "17.0.0-alpha.6", "17.0.0-alpha.5", "17.0.0-alpha.4", "17.0.0-alpha.3", "17.0.0-alpha.2", "17.0.0-alpha.1", "16.2.8", "16.2.7", "16.2.6", "16.2.5", "16.2.4", "16.2.3", "16.2.2", "16.2.1", "16.2.0", "16.1.1", "16.1.0", "16.0.10", "16.0.9", "16.0.8", "16.0.7", "16.0.6", "16.0.5", "16.0.4", "16.0.3", "16.0.2", "16.0.1", "16.0.0", "16.0.0-beta.9", "16.0.0-beta.8", "16.0.0-beta.7", "16.0.0-beta.6", "16.0.0-beta.5", "16.0.0-beta.4", "16.0.0-beta.3", "16.0.0-beta.2", "16.0.0-beta.1", "16.0.0-alpha.9", "16.0.0-alpha.8", "16.0.0-alpha.7", "16.0.0-alpha.6", "16.0.0-alpha.5", "16.0.0-alpha.4", "16.0.0-alpha.3", "16.0.0-alpha.2", "16.0.0-alpha.1", "15.5.7", "15.5.6", "15.5.5", "15.5.4", "15.5.3", "15.5.2", "15.5.1", "15.5.0", "15.4.2", "15.4.1", "15.4.0", "15.3.7", "15.3.6", "15.3.5", "15.3.4", "15.3.3", "15.3.2", "15.3.1", "15.3.0", "15.2.0", "15.1.2", "15.1.1", "15.1.0", "15.0.0", "15.0.0-beta.7", "15.0.0-beta.6", "15.0.0-beta.5", "15.0.0-beta.4", "15.0.0-beta.3", "15.0.0-beta.2", "15.0.0-beta.1", "15.0.0-alpha.10", "15.0.0-alpha.9", "15.0.0-alpha.8", "15.0.0-alpha.7", "15.0.0-alpha.6", "15.0.0-alpha.5", "15.0.0-alpha.4", "15.0.0-alpha.3", "15.0.0-alpha.2", "15.0.0-alpha.1", "14.2.9", "14.2.8", "14.2.7", "14.2.6", "14.2.5", "14.2.4", "14.2.3", "14.2.2", "14.2.1", "14.2.0", "14.1.1", "14.1.0", "14.0.2", "14.0.1", "14.0.0", "14.0.0-beta.25", "14.0.0-beta.24", "14.0.0-beta.23", "14.0.0-beta.22", "14.0.0-beta.21", "14.0.0-beta.20", "14.0.0-beta.19", "14.0.0-beta.18", "14.0.0-beta.17", "14.0.0-beta.16", "14.0.0-beta.15", "14.0.0-beta.14", "14.0.0-beta.13", "14.0.0-beta.12", "14.0.0-beta.11", "14.0.0-beta.10", "14.0.0-beta.9", "14.0.0-beta.8", "14.0.0-beta.7", "14.0.0-beta.6", "14.0.0-beta.5", "14.0.0-beta.3", "14.0.0-beta.2", "14.0.0-beta.1", "13.6.9", "13.6.8", "13.6.7", "13.6.6", "13.6.3", "13.6.2", "13.6.1", "13.6.0", "13.5.2", "13.5.1", "13.5.0", "13.4.0", "13.3.0", "13.2.3", "13.2.2", "13.2.1", "13.2.0", "13.1.9", "13.1.8", "13.1.7", "13.1.6", "13.1.5", "13.1.4", "13.1.3", "13.1.2", "13.1.1", "13.1.0", "13.0.1", "13.0.0", "13.0.0-beta.28", "13.0.0-beta.27", "13.0.0-beta.26", "13.0.0-beta.24", "13.0.0-beta.23", "13.0.0-beta.22", "13.0.0-beta.21", "13.0.0-beta.20", "13.0.0-beta.18", "13.0.0-beta.17", "13.0.0-beta.16", "13.0.0-beta.14", "13.0.0-beta.13", "13.0.0-beta.12", "13.0.0-beta.11", "13.0.0-beta.9", "13.0.0-beta.8", "13.0.0-beta.7", "13.0.0-beta.6", "13.0.0-beta.5", "13.0.0-beta.4", "13.0.0-beta.3", "13.0.0-beta.2", "12.2.3", "12.2.2", "12.2.1", "12.2.0", "12.1.2", "12.1.1", "12.1.0", "12.0.18", "12.0.17", "12.0.16", "12.0.15", "12.0.14", "12.0.13", "12.0.12", "12.0.11", "12.0.10", "12.0.9", "12.0.8", "12.0.7", "12.0.6", "12.0.5", "12.0.4", "12.0.3", "12.0.2", "12.0.1", "12.0.0", "12.0.0-beta.31", "12.0.0-beta.30", "12.0.0-beta.29", "12.0.0-beta.28", "12.0.0-beta.27", "12.0.0-beta.26", "12.0.0-beta.25", "12.0.0-beta.24", "12.0.0-beta.23", "12.0.0-beta.22", "12.0.0-beta.21", "12.0.0-beta.20", "12.0.0-beta.19", "12.0.0-beta.18", "12.0.0-beta.16", "12.0.0-beta.14", "12.0.0-beta.12", "12.0.0-beta.11", "12.0.0-beta.10", "12.0.0-beta.9", "12.0.0-beta.8", "12.0.0-beta.7", "12.0.0-beta.6", "12.0.0-beta.5", "12.0.0-beta.4", "12.0.0-beta.3", "12.0.0-beta.1", "11.5.0", "11.4.12", "11.4.11", "11.4.10", "11.4.9", "11.4.8", "11.4.7", "11.4.6", "11.4.5", "11.4.4", "11.4.3", "11.4.2", "11.4.1", "11.4.0", "11.3.0", "11.2.3", "11.2.2", "11.2.1", "11.2.0", "11.1.1", "11.1.0", "11.0.5", "11.0.4", "11.0.3", "11.0.2", "11.0.1", "11.0.0", "11.0.0-beta.23", "11.0.0-beta.22", "11.0.0-beta.20", "11.0.0-beta.19", "11.0.0-beta.18", "11.0.0-beta.17", "11.0.0-beta.16", "11.0.0-beta.13", "11.0.0-beta.12", "11.0.0-beta.11", "11.0.0-beta.9", "11.0.0-beta.8", "11.0.0-beta.7", "11.0.0-beta.6", "11.0.0-beta.4", "11.0.0-beta.3", "11.0.0-beta.1", "10.4.7", "10.4.6", "10.4.5", "10.4.4", "10.4.3", "10.4.2", "10.4.1", "10.4.0", "10.3.2", "10.3.1", "10.3.0", "10.2.0", "10.1.7", "10.1.6", "10.1.5", "10.1.4", "10.1.3", "10.1.2", "10.1.1", "10.1.0", "10.0.1", "10.0.0", "10.0.0-beta.25", "10.0.0-beta.23", "10.0.0-beta.21", "10.0.0-beta.20", "10.0.0-beta.19", "10.0.0-beta.17", "10.0.0-beta.15", "10.0.0-beta.14", "10.0.0-beta.12", "10.0.0-beta.11", "10.0.0-beta.10", "10.0.0-beta.9", "10.0.0-beta.8", "10.0.0-beta.4", "10.0.0-beta.3", "10.0.0-beta.2", "10.0.0-beta.1", "9.4.4", "9.4.3", "9.4.2", "9.4.1", "9.4.0", "9.3.5", "9.3.4", "9.3.3", "9.3.2", "9.3.1", "9.3.0", "9.2.1", "9.2.0", "9.1.2", "9.1.1", "9.1.0", "9.0.5", "9.0.4", "9.0.3", "9.0.2", "9.0.1", "9.0.0", "9.0.0-beta.24", "9.0.0-beta.22", "9.0.0-beta.21", "9.0.0-beta.20", "9.0.0-beta.19", "9.0.0-beta.18", "9.0.0-beta.17", "9.0.0-beta.16", "9.0.0-beta.15", "9.0.0-beta.14", "9.0.0-beta.13", "9.0.0-beta.12", "9.0.0-beta.10", "9.0.0-beta.9", "9.0.0-beta.7", "9.0.0-beta.6", "9.0.0-beta.5", "9.0.0-beta.4", "9.0.0-beta.3", "9.0.0-beta.2", "9.0.0-beta.1", "8.5.5", "8.5.4", "8.5.3", "8.5.2", "8.5.1", "8.5.0", "8.4.1", "8.4.0", "8.3.4", "8.3.3", "8.3.2", "8.3.1", "8.3.0", "8.2.5", "8.2.4", "8.2.3", "8.2.2", "8.2.1", "8.2.0", "8.1.1", "8.1.0", "8.0.3", "8.0.2", "8.0.1", "8.0.0", "8.0.0-beta.9", "8.0.0-beta.8", "8.0.0-beta.7", "8.0.0-beta.6", "8.0.0-beta.5", "8.0.0-beta.4", "8.0.0-beta.3", "8.0.0-beta.2", "8.0.0-beta.1", "7.3.3", "7.3.2", "7.3.1", "7.3.0", "7.2.4", "7.2.3", "7.2.2", "7.2.1", "7.2.0", "7.1.14", "7.1.13", "7.1.12", "7.1.11", "7.1.10", "7.1.9", "7.1.8", "7.1.7", "7.1.6", "7.1.5", "7.1.4", "7.1.3", "7.1.2", "7.1.1", "7.1.0", "7.0.1", "7.0.0", "7.0.0-beta.7", "7.0.0-beta.6", "7.0.0-beta.5", "7.0.0-beta.4", "7.0.0-beta.3", "7.0.0-beta.2", "7.0.0-beta.1", "6.1.12", "6.1.11", "6.1.10", "6.1.9", "6.1.8", "6.1.7", "6.1.6", "6.1.5", "6.1.4", "6.1.3", "6.1.2", "6.1.1", "6.1.0", "6.0.12", "6.0.11", "6.0.10", "6.0.9", "6.0.8", "6.0.7", "6.0.6", "6.0.5", "6.0.4", "6.0.3", "6.0.2", "6.0.1", "6.0.0", "6.0.0-beta.15", "6.0.0-beta.14", "6.0.0-beta.13", "6.0.0-beta.12", "6.0.0-beta.11", "6.0.0-beta.10", "6.0.0-beta.9", "6.0.0-beta.8", "6.0.0-beta.7", "6.0.0-beta.6", "6.0.0-beta.5", "6.0.0-beta.4", "6.0.0-beta.3", "6.0.0-beta.2", "6.0.0-beta.1", "5.0.13", "5.0.12", "5.0.11", "5.0.10", "5.0.9", "5.0.8", "5.0.7", "5.0.6", "5.0.5", "5.0.4", "5.0.3", "5.0.2", "5.0.1", "5.0.0", "5.0.0-beta.9", "5.0.0-beta.8", "5.0.0-beta.7", "5.0.0-beta.6", "5.0.0-beta.5", "5.0.0-beta.4", "5.0.0-beta.3", "5.0.0-beta.2", "5.0.0-beta.1", "4.2.12", "4.2.11", "4.2.10", "4.2.9", "4.2.8", "4.2.7", "4.2.6", "4.2.5", "4.2.4", "4.2.3", "4.2.2", "4.2.1", "4.2.0", "4.1.5", "4.1.4", "4.1.3", "4.1.2", "4.1.1", "4.1.0", "4.0.8", "4.0.7", "4.0.6", "4.0.5", "4.0.4", "4.0.3", "4.0.2", "4.0.1", "4.0.0", "4.0.0-beta.11", "4.0.0-beta.10", "4.0.0-beta.9", "4.0.0-beta.8", "4.0.0-beta.7", "4.0.0-beta.6", "4.0.0-beta.5", "4.0.0-beta.4", "4.0.0-beta.3", "4.0.0-beta.2", "4.0.0-beta.1", "3.1.13", "3.1.12", "3.1.11", "3.1.10", "3.1.9", "3.1.8", "3.1.7", "3.1.6", "3.1.5", "3.1.4", "3.1.3", "3.1.2", "3.1.1", "3.1.0", "3.1.0-beta.5", "3.1.0-beta.4", "3.1.0-beta.3", "3.1.0-beta.2", "3.1.0-beta.1", "3.0.16", "3.0.15", "3.0.14", "3.0.13", "3.0.12", "3.0.11", "3.0.10", "3.0.9", "3.0.8", "3.0.7", "3.0.6", "3.0.5", "3.0.4", "3.0.3", "3.0.2", "3.0.1", "3.0.0", "3.0.0-beta.13", "3.0.0-beta.12", "3.0.0-beta.11", "3.0.0-beta.10", "3.0.0-beta.9", "3.0.0-beta.8", "3.0.0-beta.7", "3.0.0-beta.6", "3.0.0-beta.5", "3.0.0-beta.4", "3.0.0-beta.3", "3.0.0-beta.2", "3.0.0-beta.1", "2.1.0-unsupported.20180809", "2.0.18", "2.0.17", "2.0.16", "2.0.15", "2.0.14", "2.0.13", "2.0.12", "2.0.11", "2.0.10", "2.0.9", "2.0.8", "2.0.7", "2.0.6", "2.0.5", "2.0.4", "2.0.3", "2.0.2", "2.0.1", "2.0.0", "2.0.0-beta.8", "2.0.0-beta.7", "2.0.0-beta.6", "2.0.0-beta.5", "2.0.0-beta.4", "2.0.0-beta.3", "2.0.0-beta.2", "2.0.0-beta.1", "1.8.8", "1.8.7", "1.8.6", "1.8.5", "1.8.4", "1.8.3", "1.8.2", "1.8.2-beta.5", "1.8.2-beta.4", "1.8.2-beta.3", "1.8.2-beta.2", "1.8.2-beta.1", "1.8.1", "1.7.16", "1.7.15", "1.7.14", "1.7.13", "1.7.12", "1.7.11", "1.7.10", "1.7.9", "1.7.8", "1.7.7", "1.7.6", "1.7.5", "1.7.4", "1.7.3", "1.7.2", "1.7.1", "1.7.0", "1.6.18", "1.6.17", "1.6.16", "1.6.15", "1.6.14", "1.6.13", "1.6.12", "1.6.11", "1.6.10", "1.6.9", "1.6.8", "1.6.7", "1.6.6", "1.6.5", "1.6.4", "1.6.3", "1.6.2", "1.6.1", "1.6.0", "1.5.1", "1.5.0", "1.4.16", "1.4.15", "1.4.14", "1.4.13", "1.4.12", "1.4.11", "1.4.10", "1.4.8", "1.4.7", "1.4.6", "1.4.5", "1.4.4", "1.4.3", "1.4.2", "1.4.1", "1.4.0", "1.3.15", "1.3.14", "1.3.13", "1.3.12", "1.3.10", "1.3.9", "1.3.8", "1.3.7", "1.3.6", "1.3.5", "1.3.4", "1.3.3", "1.3.2", "1.3.1", "0.4.1", "0.4.0", "0.3.0", "0.2.1", "0.2.0", "0.1.2", "0.1.1", "0.1.0"]
Secure versions: [35.7.5, 36.8.1, 36.9.0, 36.9.1, 36.9.2, 36.9.3, 36.9.4, 36.9.5, 37.10.0, 37.10.1, 37.10.2, 37.10.3, 37.3.1, 37.4.0, 37.5.0, 37.5.1, 37.6.0, 37.6.1, 37.7.0, 37.7.1, 37.8.0, 37.9.0, 38.0.0, 38.0.0-beta.11, 38.0.0-beta.6, 38.0.0-beta.7, 38.0.0-beta.8, 38.0.0-beta.9, 38.1.0, 38.1.1, 38.1.2, 38.2.0, 38.2.1, 38.2.2, 38.3.0, 38.4.0, 38.5.0, 38.6.0, 38.7.0, 38.7.1, 38.7.2, 39.0.0, 39.0.0-alpha.1, 39.0.0-alpha.2, 39.0.0-alpha.3, 39.0.0-alpha.4, 39.0.0-alpha.5, 39.0.0-alpha.6, 39.0.0-alpha.7, 39.0.0-alpha.8, 39.0.0-alpha.9, 39.0.0-beta.1, 39.0.0-beta.2, 39.0.0-beta.3, 39.0.0-beta.4, 39.0.0-beta.5, 39.1.0, 39.1.1, 39.1.2, 39.2.0, 39.2.1, 39.2.2, 39.2.3, 39.2.4, 39.2.5, 39.2.6, 39.2.7, 40.0.0-alpha.2, 40.0.0-alpha.4, 40.0.0-alpha.5, 40.0.0-alpha.6, 40.0.0-alpha.7, 40.0.0-alpha.8, 40.0.0-beta.1, 40.0.0-beta.2, 40.0.0-beta.3]
Recommendation: Update to version 39.2.7.
electron ASAR Integrity bypass by just modifying the content
Published date: 2025-06-30T17:54:11Z
CVE: CVE-2024-46992
Links:
electron's ASAR Integrity can be bypass by modifying the content.
Impact
This only impacts apps that have the embeddedAsarIntegrityValidation and onlyLoadAppFromAsar fuses enabled. Apps without these fuses enabled are not impacted. This issue is specific to Windows, apps using these fuses on macOS are unimpacted.
Specifically this issue can only be exploited if your app is launched from a filesystem the attacker has write access too. i.e. the ability to edit files inside the .app bundle on macOS which these fuses are supposed to protect against.
Workarounds
There are no app side workarounds, you must update to a patched version of Electron.
Fixed Versions
30.0.531.0.0-beta.1
For more information
If you have any questions or comments about this advisory, email us at security@electronjs.org
Affected versions: ["31.0.0-alpha.5", "31.0.0-alpha.4", "31.0.0-alpha.3", "31.0.0-alpha.2", "31.0.0-alpha.1", "30.0.4", "30.0.3", "30.0.2", "30.0.1", "30.0.0", "30.0.0-beta.8", "30.0.0-beta.7", "30.0.0-beta.6", "30.0.0-beta.5", "30.0.0-beta.4", "30.0.0-beta.3", "30.0.0-beta.2", "30.0.0-beta.1", "30.0.0-alpha.7", "30.0.0-alpha.6", "30.0.0-alpha.5", "30.0.0-alpha.4", "30.0.0-alpha.3", "30.0.0-alpha.2", "30.0.0-alpha.1"]
Secure versions: [35.7.5, 36.8.1, 36.9.0, 36.9.1, 36.9.2, 36.9.3, 36.9.4, 36.9.5, 37.10.0, 37.10.1, 37.10.2, 37.10.3, 37.3.1, 37.4.0, 37.5.0, 37.5.1, 37.6.0, 37.6.1, 37.7.0, 37.7.1, 37.8.0, 37.9.0, 38.0.0, 38.0.0-beta.11, 38.0.0-beta.6, 38.0.0-beta.7, 38.0.0-beta.8, 38.0.0-beta.9, 38.1.0, 38.1.1, 38.1.2, 38.2.0, 38.2.1, 38.2.2, 38.3.0, 38.4.0, 38.5.0, 38.6.0, 38.7.0, 38.7.1, 38.7.2, 39.0.0, 39.0.0-alpha.1, 39.0.0-alpha.2, 39.0.0-alpha.3, 39.0.0-alpha.4, 39.0.0-alpha.5, 39.0.0-alpha.6, 39.0.0-alpha.7, 39.0.0-alpha.8, 39.0.0-alpha.9, 39.0.0-beta.1, 39.0.0-beta.2, 39.0.0-beta.3, 39.0.0-beta.4, 39.0.0-beta.5, 39.1.0, 39.1.1, 39.1.2, 39.2.0, 39.2.1, 39.2.2, 39.2.3, 39.2.4, 39.2.5, 39.2.6, 39.2.7, 40.0.0-alpha.2, 40.0.0-alpha.4, 40.0.0-alpha.5, 40.0.0-alpha.6, 40.0.0-alpha.7, 40.0.0-alpha.8, 40.0.0-beta.1, 40.0.0-beta.2, 40.0.0-beta.3]
Recommendation: Update to version 39.2.7.
1585 Other Versions
| Version | License | Security | Released | |
|---|---|---|---|---|
| 12.0.0-beta.27 | MIT | 10 | 2021-02-19 - 00:46 | almost 5 years |
| 12.0.0-beta.26 | MIT | 10 | 2021-02-16 - 11:07 | almost 5 years |
| 12.0.0-beta.25 | MIT | 10 | 2021-02-11 - 17:02 | almost 5 years |
| 12.0.0-beta.24 | MIT | 10 | 2021-02-09 - 18:37 | almost 5 years |
| 12.0.0-beta.23 | MIT | 10 | 2021-02-09 - 01:14 | almost 5 years |
| 12.0.0-beta.22 | MIT | 10 | 2021-02-04 - 17:07 | almost 5 years |
| 12.0.0-beta.21 | MIT | 10 | 2021-02-03 - 04:56 | almost 5 years |
| 12.0.0-beta.20 | MIT | 10 | 2021-02-01 - 17:07 | almost 5 years |
| 12.0.0-beta.19 | MIT | 10 | 2021-01-28 - 17:32 | almost 5 years |
| 12.0.0-beta.18 | MIT | 10 | 2021-01-25 - 16:54 | almost 5 years |
| 12.0.0-beta.16 | MIT | 10 | 2021-01-18 - 17:41 | almost 5 years |
| 12.0.0-beta.14 | MIT | 10 | 2021-01-11 - 17:30 | almost 5 years |
| 12.0.0-beta.12 | MIT | 10 | 2020-12-21 - 16:57 | almost 5 years |
| 12.0.0-beta.11 | MIT | 10 | 2020-12-17 - 17:02 | almost 5 years |
| 12.0.0-beta.10 | MIT | 10 | 2020-12-14 - 17:11 | about 5 years |
| 12.0.0-beta.9 | MIT | 10 | 2020-12-11 - 23:41 | about 5 years |
| 12.0.0-beta.8 | MIT | 10 | 2020-12-10 - 17:07 | about 5 years |
| 12.0.0-beta.7 | MIT | 10 | 2020-12-07 - 17:02 | about 5 years |
| 12.0.0-beta.6 | MIT | 10 | 2020-12-03 - 17:08 | about 5 years |
| 12.0.0-beta.5 | MIT | 10 | 2020-11-30 - 17:35 | about 5 years |
| 12.0.0-beta.4 | MIT | 10 | 2020-11-26 - 18:08 | about 5 years |
| 12.0.0-beta.3 | MIT | 10 | 2020-11-23 - 18:03 | about 5 years |
| 12.0.0-beta.1 | MIT | 10 | 2020-11-19 - 03:18 | about 5 years |
| 11.5.0 | MIT | 10 | 2021-08-31 - 19:22 | over 4 years |
| 11.4.12 | MIT | 11 | 2021-08-18 - 03:21 | over 4 years |
| 11.4.11 | MIT | 11 | 2021-08-03 - 19:37 | over 4 years |
| 11.4.10 | MIT | 11 | 2021-07-06 - 20:53 | over 4 years |
| 11.4.9 | MIT | 11 | 2021-06-22 - 02:20 | over 4 years |
| 11.4.8 | MIT | 11 | 2021-06-03 - 15:56 | over 4 years |
| 11.4.7 | MIT | 11 | 2021-05-17 - 23:01 | over 4 years |
| 11.4.6 | MIT | 11 | 2021-05-08 - 02:51 | over 4 years |
| 11.4.5 | MIT | 11 | 2021-05-05 - 01:13 | over 4 years |
| 11.4.4 | MIT | 11 | 2021-04-27 - 19:27 | over 4 years |
| 11.4.3 | MIT | 11 | 2021-04-14 - 08:16 | over 4 years |
| 11.4.2 | MIT | 11 | 2021-04-02 - 22:01 | over 4 years |
| 11.4.1 | MIT | 11 | 2021-03-23 - 19:16 | over 4 years |
| 11.4.0 | MIT | 11 | 2021-03-23 - 03:15 | over 4 years |
| 11.3.0 | MIT | 11 | 2021-02-20 - 00:00 | almost 5 years |
| 11.2.3 | MIT | 11 | 2021-02-06 - 02:19 | almost 5 years |
| 11.2.2 | MIT | 11 | 2021-02-02 - 21:13 | almost 5 years |
| 11.2.1 | MIT | 11 | 2021-01-23 - 03:56 | almost 5 years |
| 11.2.0 | MIT | 11 | 2021-01-13 - 00:39 | almost 5 years |
| 11.1.1 | MIT | 11 | 2020-12-21 - 21:12 | almost 5 years |
| 11.1.0 | MIT | 11 | 2020-12-12 - 01:33 | about 5 years |
| 11.0.5 | MIT | 12 | 2020-12-11 - 18:58 | about 5 years |
| 11.0.4 | MIT | 12 | 2020-12-07 - 22:08 | about 5 years |
| 11.0.3 | MIT | 12 | 2020-11-24 - 05:57 | about 5 years |
| 11.0.2 | MIT | 12 | 2020-11-19 - 21:55 | about 5 years |
| 11.0.1 | MIT | 12 | 2020-11-17 - 14:12 | about 5 years |
| 11.0.0 | MIT | 12 | 2020-11-16 - 22:39 | about 5 years |