deardaniel/secdata-raw huggingface dataset:
GitHub Security Advisory: GHSA-g374-mggx-p6xc
Package: openclaw (NPM)
Severity: HIGH (CVSS 0.0)
CWE: CWE-863: Incorrect Authorization
Vulnerable versions: <= 2026.3.28
Patched in: 2026.3.31

Summary: OpenClaw: Incomplete scope-clearing fix allows operator.admin escalation via trusted-proxy auth mode

Details:
## Summary
Incomplete scope-clearing fix allows operator.admin escalation via trusted-proxy auth mode

## Current Maintainer Triage
- Normalized severity: high
- Assessment: v2026.3.28 still misses trusted-proxy scope clearing for non-Control-UI clients, so self-declared operator scopes can survive on a real identity-bearing auth path; the complete fix is unreleased.

## Affected Packages / Versions
- Package: `openclaw` (npm)
- Latest published npm version: `2026.3.31`
- Vulnerable version range: `<=2026.3.28`
- Patched versions: `>= 2026.3.31`
- First stable tag containing the fix: `v2026.3.31`

## Fix Commit(s)
- `8b88b927cb0747ad24d95b07d35682bf85dc5b0e` — 2026-03-30T14:19:00+01:00

OpenClaw thanks @north-echo for reporting.
GitHub Security Advisory: GHSA-f6pf-4gjx-c94r
Package: openclaw (NPM)
Severity: HIGH (CVSS 0.0)
CWE: CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Vulnerable versions: <= 2026.3.24
Patched in: 2026.3.28

Summary: OpenClaw: Media Parsing Path Traversal Leads to Arbitrary File Read

Details:
## Summary
OpenClaw <= 2026.3.24 Media Parsing Path Traversal to Arbitrary File Read

## Affected Packages / Versions
- Package: `openclaw` (npm)
- Latest published npm version: `2026.3.31`
- Vulnerable version range: `<=2026.3.24`
- Patched versions: `>= 2026.3.28`
- First stable tag containing the fix: `v2026.3.28`

## Fix Commit(s)
- `4797bbc5b96e2cca5532e43b58915c051746fe37` — 2026-03-25T13:35:16-06:00

## Release Process Note
- The fix is already present in released version `2026.3.28`.
GitHub Security Advisory: GHSA-v3qc-wrwx-j3pw
Package: openclaw (NPM)
Severity: HIGH (CVSS 0.0)
CWE: CWE-285: Improper Authorization
Vulnerable versions: <= 2026.3.24
Patched in: 2026.3.28

Summary: OpenClaw: Agentic Consent Bypass — LLM Agent Can Silently Disable Exec Approval via `config.patch`

Details:
## Summary
Agentic Consent Bypass: LLM Agent Can Silently Disable Exec Approval via `config.patch`

## Current Maintainer Triage
- Status: open
- Normalized severity: high
- Assessment: Maintainers accepted this issue, fixed it in 76411b2afc4ae721e36c12e0ea24fd23e2fed61e on 2026-03-27, and that fix shipped in v2026.3.28, so normalize it as a fixed released draft rather than a close-by-trust-model call.

## Affected Packages / Versions
- Package: `openclaw` (npm)
- Latest published npm version: `2026.3.31`
- Vulnerable version range: `<=2026.3.24`
- Patched versions: `>= 2026.3.28`
- First stable tag containing the fix: `v2026.3.28`

## Fix Commit(s)
- `76411b2afc4ae721e36c12e0ea24fd23e2fed61e` — 2026-03-27T09:42:15Z

OpenClaw thanks @YLChen-007 for reporting.
GitHub Security Advisory: GHSA-hr8g-2q7x-3f4w
Package: openclaw (NPM)
Severity: MODERATE (CVSS 0.0)
CWE: CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
Vulnerable versions: <= 2026.3.28
Patched in: 2026.3.31

Summary: OpenClaw Has a Gateway Control Interface Information Disclosure Vulnerability

Details:
## Summary
OpenClaw Gateway Control Interface Information Disclosure Vulnerability

## Current Maintainer Triage
- Status: narrow
- Normalized severity: low
- Assessment: Released Control UI bootstrap JSON did expose version and assistant agent id, but that is low-severity fingerprinting or info disclosure only; unreleased c5c10adc trims the payload.

## Affected Packages / Versions
- Package: `openclaw` (npm)
- Latest published npm version: `2026.3.31`
- Vulnerable version range: `<=2026.3.28`
- Patched versions: `>= 2026.3.31`
- First stable tag containing the fix: `v2026.3.31`

## Fix Commit(s)
- `c5c10adc022f42eb75ebb3bf364dd607738683b3` — 2026-03-30T15:08:19+01:00

OpenClaw thanks @topsec-bunney for reporting.
GitHub Security Advisory: GHSA-w85g-3h6x-4xh2
Package: openclaw (NPM)
Severity: MODERATE (CVSS 0.0)
CWE: CWE-770: Allocation of Resources Without Limits or Throttling
Vulnerable versions: <= 2026.3.28
Patched in: 2026.3.31

Summary: OpenClaw: Image pixel-limit guard can fail open on sips and allow decompression-bomb DoS

Details:
## Summary
Image pixel-limit guard can fail open on sips and allow decompression-bomb DoS

## Current Maintainer Triage
- Status: open
- Normalized severity: medium
- Assessment: Shipped v2026.3.28 image processing could fail open on oversized pixel counts and allow decompression-bomb DoS, an availability issue that is valid at medium.

## Affected Packages / Versions
- Package: `openclaw` (npm)
- Latest published npm version: `2026.3.31`
- Vulnerable version range: `<=2026.3.28`
- Patched versions: `>= 2026.3.31`
- First stable tag containing the fix: `v2026.3.31`

## Fix Commit(s)
- `0ed4f8a72bb140045962e97ab01c94c076b758a4` — 2026-03-31T22:52:55+09:00

OpenClaw thanks @AntAISecurityLab for reporting.
GitHub Security Advisory: GHSA-g8xp-qx39-9jq9
Package: openclaw (NPM)
Severity: HIGH (CVSS 6.1)
CWE: CWE-427: Uncontrolled Search Path Element
Vulnerable versions: <= 2026.3.28
Patched in: 2026.3.31

Summary: OpenClaw: Incomplete host-env-security-policy allows untrusted model to substitute compiler binaries via env overrides

Details:
## Summary
Incomplete `host-env-security-policy.json` allows untrusted model to substitute compiler binaries (`CC`, `CXX`, `CARGO_BUILD_RUSTC`, `CMAKE_C_COMPILER`) via env overrides on approved host exec requests

## Current Maintainer Triage
- Status: narrow
- Normalized severity: medium
- Assessment: Shipped v2026.3.28 host-env policy missed compiler override vars, but exploitation still requires an approved host-exec request inside the existing exec trust domain, so medium not high.

## Affected Packages / Versions
- Package: `openclaw` (npm)
- Latest published npm version: `2026.3.31`
- Vulnerable version range: `<=2026.3.28`
- Patched versions: `>= 2026.3.31`
- First stable tag containing the fix: `v2026.3.31`

## Fix Commit(s)
- `e277a37f896b5011a1df06e6490c6630074d0afa` — 2026-03-30T20:06:32+01:00

OpenClaw thanks @tdjackey for reporting.
GitHub Security Advisory: GHSA-xj9w-5r6q-x6v4
Package: openclaw (NPM)
Severity: HIGH (CVSS 8.8)
CWE: CWE-862: Missing Authorization, CWE-863: Incorrect Authorization
Vulnerable versions: <= 2026.3.28
Patched in: 2026.3.31

Summary: OpenClaw: Device-Paired Node Skips Node Scope Gate → Host RCE.md

Details:
## Summary
Device-Paired Node Skips Node Scope Gate → Host RCE.md

## Current Maintainer Triage
- Status: open
- Normalized severity: high
- Assessment: Real in shipped v2026.3.28 because a merely device-paired node could expose node commands without node pairing, but high is sufficient given the pairing/setup prerequisites.

## Affected Packages / Versions
- Package: `openclaw` (npm)
- Latest published npm version: `2026.3.31`
- Vulnerable version range: `<=2026.3.28`
- Patched versions: `>= 2026.3.31`
- First stable tag containing the fix: `v2026.3.31`

## Fix Commit(s)
- `3886b65ef21d02808c1a106fa1f9f69e22f71c32` — 2026-03-30T17:29:28+01:00

OpenClaw thanks @AntAISecurityLab for reporting.
GitHub Security Advisory: GHSA-37v6-fxx8-xjmx
Package: openclaw (NPM)
Severity: MODERATE (CVSS 5.3)
CWE: CWE-294: Authentication Bypass by Capture-replay
Vulnerable versions: <= 2026.3.28
Patched in: 2026.3.31

Summary: OpenClaw: Telnyx Webhook Replay Detection Bypass via Base64 Signature Re-encoding

Details:
## Summary
Telnyx Webhook Replay Detection Bypass via Base64 Signature Re-encoding

## Current Maintainer Triage
- Status: narrow
- Normalized severity: low
- Assessment: Shipped v2026.3.28 replay hashing treated equivalent Telnyx Base64/Base64URL signatures as distinct requests, but signature verification still held, so lower to low.

## Affected Packages / Versions
- Package: `openclaw` (npm)
- Latest published npm version: `2026.3.31`
- Vulnerable version range: `<=2026.3.28`
- Patched versions: `>= 2026.3.31`
- First stable tag containing the fix: `v2026.3.31`

## Fix Commit(s)
- `ad[PII_REDACTED]1c1fd77b1dc60fd6a8db6600a29a` — 2026-03-30T20:01:43+01:00

## Release Process Note
- The fix is already present in released version `2026.3.31`.
- This draft looks ready for final maintainer disposition or publication, not additional code-fix work.

OpenClaw thanks @AntAISecurityLab for reporting.
GitHub Security Advisory: GHSA-9gp8-hjxr-6f34
Package: openclaw (NPM)
Severity: MODERATE (CVSS 4.4)
CWE: CWE-269: Improper Privilege Management, CWE-453: Insecure Default Variable Initialization
Vulnerable versions: <= 2026.3.28
Patched in: 2026.3.31

Summary: OpenClaw: Host exec environment overrides miss proxy, TLS, Docker, and Git TLS controls

Details:
## Summary
Host exec environment overrides miss proxy, TLS, Docker, and Git TLS controls

## Current Maintainer Triage
- Status: open
- Normalized severity: medium
- Assessment: Real in shipped v2026.3.28: host exec env policy still missed proxy, TLS, Docker, and Git TLS variables until 4d912e0451 on 2026-03-31; maintainers already accepted it and the fix is unreleased.

## Affected Packages / Versions
- Package: `openclaw` (npm)
- Latest published npm version: `2026.3.31`
- Vulnerable version range: `<=2026.3.28`
- Patched versions: `>= 2026.3.31`
- First stable tag containing the fix: `v2026.3.31`

## Fix Commit(s)
- `4d912e04519b4bd53b248437c53748cdebce9a41` — 2026-03-31T21:25:36+09:00

OpenClaw thanks @AntAISecurityLab for reporting.
GitHub Security Advisory: GHSA-hhff-fj5f-qg48
Package: openclaw (NPM)
Severity: MODERATE (CVSS 5.3)
CWE: CWE-408: Incorrect Behavior Order: Early Amplification, CWE-770: Allocation of Resources Without Limits or Throttling
Vulnerable versions: <= 2026.3.28
Patched in: 2026.3.31

Summary: OpenClaw runs Discord audio preflight transcription before member authorization

Details:
## Summary
Discord audio preflight transcription before member authorization

## Current Maintainer Triage
- Status: narrow
- Normalized severity: medium
- Assessment: v2026.3.28 still runs Discord audio preflight before member allowlist rejection, but this is the same pre-auth resource-consumption class and not the high-severity auth-bypass framing in the draft.

## Affected Packages / Versions
- Package: `openclaw` (npm)
- Latest published npm version: `2026.3.31`
- Vulnerable version range: `<=2026.3.28`
- Patched versions: `>= 2026.3.31`
- First stable tag containing the fix: `v2026.3.31`

## Fix Commit(s)
- `ee52f64226a03efadfdf1e3b759e13424a3d4e41` — 2026-03-30T14:38:22+01:00

OpenClaw thanks @AntAISecurityLab for reporting.
GitHub Security Advisory: GHSA-mhr7-2xmv-4c4q
Package: openclaw (NPM)
Severity: LOW (CVSS 7.1)
CWE: CWE-346: Origin Validation Error, CWE-352: Cross-Site Request Forgery (CSRF)
Vulnerable versions: <= 2026.3.28
Patched in: 2026.3.31

Summary: OpenClaw: HTTP operator endpoints lack browser-origin validation in trusted-proxy mode

Details:
## Summary
HTTP operator endpoints lack browser-origin validation in trusted-proxy mode

## Current Maintainer Triage
- Status: narrow
- Normalized severity: medium
- Assessment: This is a real trusted-proxy HTTP CSRF or browser-origin gap in released tags, but it is not critical because it depends on identity-bearing trusted-proxy browser deployments rather than the shared-secret HTTP operator model.

## Affected Packages / Versions
- Package: `openclaw` (npm)
- Latest published npm version: `2026.3.31`
- Vulnerable version range: `<=2026.3.28`
- Patched versions: `>= 2026.3.31`
- First stable tag containing the fix: `v2026.3.31`

## Fix Commit(s)
- `6b3f99a11f4d070fa5ed2533abbb3d7329ea4f0d` — 2026-03-31T19:49:26+09:00

OpenClaw thanks @AntAISecurityLab for reporting.
GitHub Security Advisory: GHSA-p464-m8x6-vhv8
Package: openclaw (NPM)
Severity: HIGH (CVSS 7.5)
CWE: CWE-400: Uncontrolled Resource Consumption, CWE-408: Incorrect Behavior Order: Early Amplification
Vulnerable versions: <= 2026.3.28
Patched in: 2026.3.31

Summary: OpenClaw: MS Teams webhook parses body before JWT validation, enabling unauthenticated resource exhaustion

Details:
## Summary
MS Teams webhook parses body before JWT validation, enabling unauthenticated resource exhaustion

## Current Maintainer Triage
- Status: open
- Normalized severity: medium
- Assessment: v2026.3.28 still parses Teams JSON after only a Bearer-prefix gate and before real JWT validation, and the auth-before-parse fix is not yet shipped.

## Affected Packages / Versions
- Package: `openclaw` (npm)
- Latest published npm version: `2026.3.31`
- Vulnerable version range: `<=2026.3.28`
- Patched versions: `>= 2026.3.31`
- First stable tag containing the fix: `v2026.3.31`

## Fix Commit(s)
- `3834d47099dd13c8244ed6de8b9ea9855c553623` — 2026-03-30T13:46:40+01:00

OpenClaw thanks @AntAISecurityLab for reporting.
GitHub Security Advisory: GHSA-57gh-m6rq-54cf
Package: openclaw (NPM)
Severity: HIGH (CVSS 0.0)
CWE: CWE-552: Files or Directories Accessible to External Parties
Vulnerable versions: <= 2026.3.28
Patched in: 2026.3.31

Summary: OpenClaw: Self-Whitelisting in appendLocalMediaParentRoots Allows Arbitrary File Read & Credential Exfiltration

Details:
## Summary
Media Local Roots Self-Whitelisting in `appendLocalMediaParentRoots` Allows Model-Initiated Arbitrary Host File Read and Credential Exfiltration

## Current Maintainer Triage
- Status: narrow
- Normalized severity: medium
- Assessment: v2026.3.28 still self-whitelists media parent dirs in src/media/local-roots.ts, but only after config already permits tool-fs root expansion, so the impact is narrower than the default-critical framing.

## Affected Packages / Versions
- Package: `openclaw` (npm)
- Latest published npm version: `2026.3.31`
- Vulnerable version range: `<=2026.3.28`
- Patched versions: `>= 2026.3.31`
- First stable tag containing the fix: `v2026.3.31`

## Fix Commit(s)
- `1ca4261d7e055d0be141ed79ebb1365d0fbc7364` — 2026-03-30T17:15:03+01:00

OpenClaw thanks @tdjackey for reporting.
GitHub Security Advisory: GHSA-68v4-hmwv-f43h
Package: openclaw (NPM)
Severity: MODERATE (CVSS 0.0)
CWE: CWE-522: Insufficiently Protected Credentials
Vulnerable versions: <= 2026.3.28
Patched in: 2026.3.31

Summary: OpenClaw: Media download follows cross-origin redirects with Authorization headers intact

Details:
## Summary
Media download follows cross-origin redirects with Authorization headers intact

## Current Maintainer Triage
- Status: open
- Normalized severity: medium
- Assessment: Shipped v2026.3.28 media downloads forwarded Authorization across cross-origin redirects, a real in-scope credential-leak class that fits medium.

## Affected Packages / Versions
- Package: `openclaw` (npm)
- Latest published npm version: `2026.3.31`
- Vulnerable version range: `<=2026.3.28`
- Patched versions: `>= 2026.3.31`
- First stable tag containing the fix: `v2026.3.31`

## Fix Commit(s)
- `e704323ff388ed21f6963f9b8e0b1b8dfaaabc5f` — 2026-03-31T19:57:42+09:00

OpenClaw thanks @AntAISecurityLab for reporting.
GitHub Security Advisory: GHSA-cwf8-44x6-32c2
Package: openclaw (NPM)
Severity: HIGH (CVSS 9.6)
CWE: CWE-59: Improper Link Resolution Before File Access ('Link Following'), CWE-434: Unrestricted Upload of File with Dangerous Type
Vulnerable versions: <= 2026.3.28
Patched in: 2026.3.31

Summary: OpenClaw: OpenShell Mirror Sync — Sandbox Escape via Unrestricted File Sync + Symlink Traversal

Details:
## Summary
OpenShell Mirror Sync: Sandbox Escape via Unrestricted File Sync + Symlink Traversal

## Current Maintainer Triage
- Status: narrow
- Normalized severity: high
- Assessment: v2026.3.28 still has the mirror-boundary bug because shipped c02ee8 only excluded hooks while unreleased 3b9dab is the first full symlink-free upload and download hardening.

## Affected Packages / Versions
- Package: `openclaw` (npm)
- Latest published npm version: `2026.3.31`
- Vulnerable version range: `<=2026.3.28`
- Patched versions: `>= 2026.3.31`
- First stable tag containing the fix: `v2026.3.31`

## Fix Commit(s)
- `c02ee8a3a4cb390b23afdf21317aa8b2096854d1` — 2026-03-25T19:59:07Z
- `3b9dab0ece4643a9643e6a45459f5c709d3ce320` — 2026-03-30T14:51:44+01:00

OpenClaw thanks @AntAISecurityLab for reporting.
GitHub Security Advisory: GHSA-qcj9-wwgw-6gm8
Package: openclaw (NPM)
Severity: HIGH (CVSS 7.8)
CWE: CWE-15: External Control of System or Configuration Setting, CWE-829: Inclusion of Functionality from Untrusted Control Sphere
Vulnerable versions: <= 2026.3.28
Patched in: 2026.3.31

Summary: OpenClaw: Workspace `.env` can override the bundled plugin trust root

Details:
## Summary
Workspace `.env` can override the bundled plugin trust root

## Current Maintainer Triage
- Status: open
- Normalized severity: high
- Assessment: v2026.3.28 still lets workspace .env override OPENCLAW_BUNDLED_PLUGINS_DIR, but critical is too high because exploitation still depends on attacker-controlled workspace loading, not a universal remote break.

## Affected Packages / Versions
- Package: `openclaw` (npm)
- Latest published npm version: `2026.3.31`
- Vulnerable version range: `<=2026.3.28`
- Patched versions: `>= 2026.3.31`
- First stable tag containing the fix: `v2026.3.31`

## Fix Commit(s)
- `330a9f98cb29c79b1c16a2117e03d6276a0d6289` — 2026-03-31T19:25:12+09:00

OpenClaw thanks @nexrin for reporting.
GitHub Security Advisory: GHSA-jfqg-hf23-qpw2
Package: electron (NPM)
Severity: HIGH (CVSS 8.3)
CWE: CWE-668: Exposure of Resource to Wrong Sphere, CWE-1188: Initialization of a Resource with an Insecure Default
Vulnerable versions: >= 41.0.0-alpha.1, < 41.0.0-beta.8
Patched in: 41.0.0-beta.8

Summary: Electron: Context Isolation bypass via contextBridge VideoFrame transfer

Details:
### Impact
Apps that pass `VideoFrame` objects (from the WebCodecs API) across the `contextBridge` are vulnerable to a context isolation bypass. An attacker who can execute JavaScript in the main world (for example, via XSS) can use a bridged `VideoFrame` to gain access to the isolated world, including any Node.js APIs exposed to the preload script.

Apps are only affected if a preload script returns, resolves, or passes a `VideoFrame` object to the main world via `contextBridge.exposeInMainWorld()`. Apps that do not bridge `VideoFrame` objects are not affected.

### Workarounds
Do not pass `VideoFrame` objects across `contextBridge`. If an app needs to transfer video frame data, serialize it to an `ArrayBuffer` or `ImageBitmap` before bridging.

### Fixed Versions
* `41.0.0-beta.8`
* `40.7.0`
* `39.8.0`

### For more information
If there are any questions or comments about this advisory, please email [security@electronjs.org](mailto:security@electronjs.org)
GitHub Security Advisory: GHSA-jfqg-hf23-qpw2
Package: electron (NPM)
Severity: HIGH (CVSS 8.3)
CWE: CWE-668: Exposure of Resource to Wrong Sphere, CWE-1188: Initialization of a Resource with an Insecure Default
Vulnerable versions: >= 40.0.0-alpha.1, < 40.7.0
Patched in: 40.7.0

Summary: Electron: Context Isolation bypass via contextBridge VideoFrame transfer

Details:
### Impact
Apps that pass `VideoFrame` objects (from the WebCodecs API) across the `contextBridge` are vulnerable to a context isolation bypass. An attacker who can execute JavaScript in the main world (for example, via XSS) can use a bridged `VideoFrame` to gain access to the isolated world, including any Node.js APIs exposed to the preload script.

Apps are only affected if a preload script returns, resolves, or passes a `VideoFrame` object to the main world via `contextBridge.exposeInMainWorld()`. Apps that do not bridge `VideoFrame` objects are not affected.

### Workarounds
Do not pass `VideoFrame` objects across `contextBridge`. If an app needs to transfer video frame data, serialize it to an `ArrayBuffer` or `ImageBitmap` before bridging.

### Fixed Versions
* `41.0.0-beta.8`
* `40.7.0`
* `39.8.0`

### For more information
If there are any questions or comments about this advisory, please email [security@electronjs.org](mailto:security@electronjs.org)
GitHub Security Advisory: GHSA-jfqg-hf23-qpw2
Package: electron (NPM)
Severity: HIGH (CVSS 8.3)
CWE: CWE-668: Exposure of Resource to Wrong Sphere, CWE-1188: Initialization of a Resource with an Insecure Default
Vulnerable versions: >= 39.0.0-alpha.1, < 39.8.0
Patched in: 39.8.0

Summary: Electron: Context Isolation bypass via contextBridge VideoFrame transfer

Details:
### Impact
Apps that pass `VideoFrame` objects (from the WebCodecs API) across the `contextBridge` are vulnerable to a context isolation bypass. An attacker who can execute JavaScript in the main world (for example, via XSS) can use a bridged `VideoFrame` to gain access to the isolated world, including any Node.js APIs exposed to the preload script.

Apps are only affected if a preload script returns, resolves, or passes a `VideoFrame` object to the main world via `contextBridge.exposeInMainWorld()`. Apps that do not bridge `VideoFrame` objects are not affected.

### Workarounds
Do not pass `VideoFrame` objects across `contextBridge`. If an app needs to transfer video frame data, serialize it to an `ArrayBuffer` or `ImageBitmap` before bridging.

### Fixed Versions
* `41.0.0-beta.8`
* `40.7.0`
* `39.8.0`

### For more information
If there are any questions or comments about this advisory, please email [security@electronjs.org](mailto:security@electronjs.org)
GitHub Security Advisory: GHSA-5rqw-r77c-jp79
Package: electron (NPM)
Severity: MODERATE (CVSS 6.5)
CWE: CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Vulnerable versions: >= 41.0.0-alpha.1, < 41.0.0-beta.8
Patched in: 41.0.0-beta.8

Summary: Electron: AppleScript injection in app.moveToApplicationsFolder on macOS

Details:
### Impact
On macOS, `app.moveToApplicationsFolder()` used an AppleScript fallback path that did not properly handle certain characters in the application bundle path. Under specific conditions, a crafted launch path could lead to arbitrary AppleScript execution when the user accepted the move-to-Applications prompt.

Apps are only affected if they call `app.moveToApplicationsFolder()`. Apps that do not use this API are not affected.

### Workarounds
There are no app side workarounds, developers must update to a patched version of Electron.

### Fixed Versions
* `41.0.0-beta.8`
* `40.8.0`
* `39.8.1`
* `38.8.6`

### For more information
If there are any questions or comments about this advisory, please email [security@electronjs.org](mailto:security@electronjs.org)
GitHub Security Advisory: GHSA-5rqw-r77c-jp79
Package: electron (NPM)
Severity: MODERATE (CVSS 6.5)
CWE: CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Vulnerable versions: >= 40.0.0-alpha.1, < 40.8.0
Patched in: 40.8.0

Summary: Electron: AppleScript injection in app.moveToApplicationsFolder on macOS

Details:
### Impact
On macOS, `app.moveToApplicationsFolder()` used an AppleScript fallback path that did not properly handle certain characters in the application bundle path. Under specific conditions, a crafted launch path could lead to arbitrary AppleScript execution when the user accepted the move-to-Applications prompt.

Apps are only affected if they call `app.moveToApplicationsFolder()`. Apps that do not use this API are not affected.

### Workarounds
There are no app side workarounds, developers must update to a patched version of Electron.

### Fixed Versions
* `41.0.0-beta.8`
* `40.8.0`
* `39.8.1`
* `38.8.6`

### For more information
If there are any questions or comments about this advisory, please email [security@electronjs.org](mailto:security@electronjs.org)