Detections
Analytics
SCA: security update for electron (GHSA-h3v5-h239-pg29)
low Tenable Self-Hosted Container Security Plugin ID 476849
Description
There are packages installed that are affected by a vulnerability referenced in the following CVE:- Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS.
Prior to versions 42.11.6, 43.7.3, 44.4.3, and 45.0.0-alpha.9, frame data received from the GPU process
for macOS offscreen rendering was not fully validated by the main process. An attacker who had separately
gained code execution in the GPU process could provide inconsistent frame geometry and cause the main
process to read out-of-bounds memory while producing paint event images, disclosing memory or crashing the
application. This issue is fixed in versions 42.11.6, 43.7.3, 44.4.3, and 45.0.0-alpha.9.
(CVE-2026-114124)
Solution
Update the electron library and its related packages to version 42.11.6 or later.See Also
Plugin Details
Severity: Low
ID: 476849
Version: Revision 1.1
Type: Local
Family: SCA Checks
Published: 10/22/2026
Updated: 10/22/2026
Risk Information
VPR
Risk Factor: Low
Score: 2.3
Percentile: 10.26
Vendor
Vendor Severity: Low
CVSS v2
Risk Factor: Low
Base Score: 2.3
Temporal Score: 1.7
Vector: CVSS2#AV:L/AC:H/Au:M/C:P/I:N/A:P
CVSS Score Source: CVE-2026-114124
CVSS v3
Risk Factor: Low
Base Score: 3.9
Temporal Score: 3.4
Vector: CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:N/A:L
Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C
Vulnerability Information
Exploit Ease: No known exploits are available
Patch Publication Date: 10/22/2026
Vulnerability Publication Date: 10/21/2026
Reference Information
CVE: CVE-2026-114124
cwe: CWE-125