Approved changes feed: RSS · Atom

cpe:2.3:a:openvpn:connect:3.1.0:beta:*:*:*:windows:*:*

part: a version: 3.1.0 update: beta

VendorOpenvpn (69250643-f594-58ab-9395-086994cbe5f3)
ProductConnect (85eec71f-49f2-5f92-afc6-44512155abac)
Edition*
Language*
Software edition*
Target softwarewindows
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:docker/diadebeltphy/openvpn-connect-mac-download purl2cpe 2026-06-01 10:12:10.721758
pkg:docker/zhujintao/openvpn-connect purl2cpe 2026-06-01 10:12:10.721760

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-7245 vulnerable 2026-06-03 14:54:00.287722 Details available
The nodejs framework in OpenVPN Connect 3.0 through 3.4.3 (Windows)/3.4.7 (macOS) was not properly configured, which allows a local user to execute arbitrary code within the nodejs process context via the ELECTRON_RUN_AS_NODE environment variable
Published: 2024-02-20T11:08:29.089Z
Updated: 2024-08-14T14:36:15.335Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.