If you believe you have found a security vulnerability in electerm, we encourage you to report it immediately.
We review all legitimate reports and work quickly to fix any issues to ensure the safety, reliability, and stability of our services
Security: electerm/electerm
Security
SECURITY.md
-
Command Injection in File System Operations (rmrf, mv, cp) in electermGHSA-v5ff-xmfp-p245 published
May 29, 2026 by zxdong262High -
Path Traversal in Zmodem and Trzsz Download Filename Handling in electermGHSA-38j7-23hf-9mhc published
May 29, 2026 by zxdong262High -
electerm's encrypt method not safe enoughGHSA-g29v-q6h7-76wh published
May 13, 2026 by zxdong262Moderate -
Local code through electerm's single-instance socketGHSA-7p5m-v798-f8vv published
May 12, 2026 by zxdong262Critical -
Import unsafe bookmark data could lead to unsafe operations in electermGHSA-jgg9-rw32-44pj published
May 9, 2026 by zxdong262Critical -
Arbitrary local code execution via deep links/CLI in electermGHSA-mpm8-cx2p-626q published
May 5, 2026 by zxdong262Critical -
Full process.env exposed to renderer via window.pre.env in electermGHSA-37j4-88rp-2f6h published
May 4, 2026 by zxdong262Moderate -
Unvalidated shell.openExternal in electerm allows arbitrary protocol execution via terminal link clickGHSA-fwf6-j56g-m97c published
May 4, 2026 by zxdong262Critical -
Path traversal in electerm runWidget leads to arbitrary code executionGHSA-f77v-9vpc-6pjm published
May 4, 2026 by zxdong262High -
Security Vulnerability, RCE via malicious file name open or edit with custom editor in electermGHSA-q4p8-8j9m-8hxj published
May 4, 2026 by zxdong262High
Learn more about advisories related to electerm/electerm in the GitHub Advisory Database