Electronjs Electron 17.0.0 Alpha 2
Approved changes feed: RSS · Atom
cpe:2.3:a:electronjs:electron:17.0.0:alpha2:*:*:*:*:*:*
part: a version: 17.0.0 update: alpha2
| Vendor | Electronjs (2af93ff4-38f6-5aef-acc5-80ca92aa0b83) |
|---|---|
| Product | Electron (3ffe6bdf-afda-502c-ac98-8ec4a42261cc) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/electron/electron |
purl2cpe | 2026-06-01 10:17:08.315262 |
pkg:gitlab/immersaview/electron |
purl2cpe | 2026-06-01 10:17:08.315263 |
pkg:npm/electron |
purl2cpe | 2026-06-01 10:17:08.315265 |
pkg:sourceforge/electron.mirror |
purl2cpe | 2026-06-01 10:17:08.315266 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-21718 |
vulnerable | 2026-06-08 05:40:02.073764 |
Renderers can obtain access to random bluetooth device without permission in Electron
LOW (3.4)
Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. A vulnerability in versions prior to `17.0.0-alpha.6`, `16.0.6`, `15.3.5`, `14.2.4`, and `13.6.6` allows renderers to obtain access to a bluetooth device via the web bluetooth API if the app has not configured a custom `select-bluetooth-device` event handler. This has been patched and Electron versions `17.0.0-alpha.6`, `16.0.6`, `15.3.5`, `14.2.4`, and `13.6.6` contain the fix. Code from the GitHub Security Advisory can be added to the app to work around the issue.
Published: 2022-03-22T16:25:12.000Z
Updated: 2025-04-23T18:45:03.237Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.