CWE-154

Improper Neutralization of Variable Name Delimiters

1 CVEs Avg CVSS 7.5 MITRE

CRITICAL

HIGH

MEDIUM

LOW

POC

KEV

Monthly

CVE-2024-39698 npm HIGH POC PATCH This Week

electron-updater allows for automatic updates for Electron apps. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required. Public exploit code available.

XSS Microsoft Electron Builder

NVD GitHub

CVSS 3.1

7.5

EPSS

0.3%

CVE-2024-39698 npm

EPSS 0% CVSS 7.5

HIGH POC PATCH This Week

electron-updater allows for automatic updates for Electron apps. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required. Public exploit code available.

XSS Microsoft Electron Builder

NVD GitHub