Skip to content

[Snyk] Security upgrade electron from 15.5.7 to 36.3.0 #32

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
wants to merge 1 commit into
base: master
Choose a base branch
from
Open

[Snyk] Security upgrade electron from 15.5.7 to 36.3.0 #32

wants to merge 1 commit into from

Conversation

TheRedHatter
Copy link
Owner

snyk-top-banner

Snyk has created this PR to fix 1 vulnerabilities in the npm dependencies of this project.

Snyk changed the following file(s):

  • doc/js_tutorials/js_assets/webnn-electron/package.json

Vulnerabilities that will be fixed with an upgrade:

Issue Score
high severity Function Call with Incorrectly Specified Arguments
SNYK-JS-ELECTRON-10245168		   671  

Important

  • Check the changes in this PR to ensure they won't cause issues with your project.
  • Max score is 1000. Note that the real score may have changed since the PR was raised.
  • This PR was automatically created by Snyk using the credentials of a real user.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.

@snyk-bot
fix: doc/js_tutorials/js_assets/webnn-electron/package.json to reduce…
9346c31 
… vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-ELECTRON-10245168
@socket-security Socket Security
Copy link

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security		 Vulnerability Quality Maintenance License
Addedpypi/​torch@​2.7.07210010010070
Addedpypi/​torchvision@​0.22.073100100100100
Addedpypi/​tensorflow@​2.19.07610010010060
Addedpypi/​tensorflow-gpu@​2.12.01008598100100
Updatednpm/​electron@​15.5.7 ⏵ 36.3.194 +1100 +27100 +197100

View full report

@TheRedHatter
Copy link
Owner Author

TheRedHatter commented May 25, 2025 •
edited
Loading

🎉 Snyk checks have passed. No issues have been found so far.

✅ security/snyk check is complete. No issues have been found. (View Details)

✅ license/snyk check is complete. No issues have been found. (View Details)

@TheRedHatter
Copy link
Owner Author

Logo
Checkmarx One – Scan Summary & Details – 3b859c84-b82c-4b6b-b609-ac82c65d16cd

New Issues (279)

Checkmarx found the following issues in this Pull Request

Severity Issue Source File / Package Checkmarx Insight
CRITICAL Buffer_Improper_Index_Access /modules/stitching/src/util.cpp: 90
detailsThe array index size at /modules/stitching/src/util.cpp in line 90 is used to reference an index of a cell of the array size at /modules/stitching...
ID: HnM0T6WwCJnIrkjUWW2yT1SWM80%3D
Attack Vector
CRITICAL Buffer_Improper_Index_Access /modules/stitching/src/util.cpp: 85
detailsThe array index size at /modules/stitching/src/util.cpp in line 85 is used to reference an index of a cell of the array size at /modules/stitching...
ID: Lt%2FlTYnox4UH%2BXLKTPmLdx3jX0I%3D
Attack Vector
CRITICAL Buffer_Improper_Index_Access /modules/stitching/src/util.cpp: 79
detailsThe array index size at /modules/stitching/src/util.cpp in line 79 is used to reference an index of a cell of the array size at /modules/stitching...
ID: wJdhMV3gObrX4izFjwRw3idWiVo%3D
Attack Vector
CRITICAL Buffer_Improper_Index_Access /modules/imgcodecs/src/rgbe.cpp: 352
detailsThe array index buffer at /modules/imgcodecs/src/rgbe.cpp in line 352 is used to reference an index of a cell of the array buffer at /modules/imgc...
ID: RPrWMmwhUbgh7HHJ13%2B2zu%2F%2BZzc%3D
Attack Vector
CRITICAL Buffer_Improper_Index_Access /modules/photo/src/arrays.hpp: 178
detailsThe array index steps at /modules/photo/src/arrays.hpp in line 178 is used to reference an index of a cell of the array steps at /modules/photo/sr...
ID: xtufRmWcos7eFUMM%2BjVElpiQdP0%3D
Attack Vector
CRITICAL Buffer_Improper_Index_Access /modules/imgcodecs/src/rgbe.cpp: 350
detailsThe array index buffer at /modules/imgcodecs/src/rgbe.cpp in line 350 is used to reference an index of a cell of the array buffer at /modules/imgc...
ID: qKSNsZ2uGJUCntEXLZgN%2FG0ED60%3D
Attack Vector
CRITICAL Buffer_Improper_Index_Access /modules/dnn/perf/perf_convolution3d.cpp: 97
detailsThe array index testConvolution3DConfigs at /modules/dnn/perf/perf_convolution3d.cpp in line 97 is used to reference an index of a cell of the ar...
ID: S0K76Wwu0ij4w4yQCsqQMW2ImzU%3D
Attack Vector
CRITICAL Buffer_Improper_Index_Access /modules/imgcodecs/src/rgbe.cpp: 351
detailsThe array index buffer at /modules/imgcodecs/src/rgbe.cpp in line 351 is used to reference an index of a cell of the array buffer at /modules/imgc...
ID: dVJn08bDKqpJ0qI%2B%2BN3q34OiGII%3D
Attack Vector
CRITICAL Buffer_Improper_Index_Access /modules/imgproc/src/rotcalipers.cpp: 346
detailsThe array index out at /modules/imgproc/src/rotcalipers.cpp in line 346 is used to reference an index of a cell of the array out at /modules/imgpr...
ID: NLy%2FjQ6GLsNQEmbdtwhEA06SKGc%3D
Attack Vector
CRITICAL Buffer_Improper_Index_Access /modules/imgproc/src/rotcalipers.cpp: 345
detailsThe array index out at /modules/imgproc/src/rotcalipers.cpp in line 345 is used to reference an index of a cell of the array out at /modules/imgpr...
ID: 7aTJHUy%2BleZGEV61b5dky84bEhM%3D
Attack Vector
CRITICAL Buffer_Improper_Index_Access /modules/core/src/convert_scale.simd.hpp: 309
detailsThe array index cvtScaleAbsTab at /modules/core/src/convert_scale.simd.hpp in line 309 is used to reference an index of a cell of the array cvtS...
ID: nXPPMAYIJxAr2%2FvI%2BNpfACJdfNk%3D
Attack Vector
CRITICAL Buffer_Improper_Index_Access /modules/dnn/perf/perf_convolution1d.cpp: 76
detailsThe array index testConvolution1DConfigs at /modules/dnn/perf/perf_convolution1d.cpp in line 76 is used to reference an index of a cell of the ar...
ID: f7PIG44nKAubZI1aStuL%2Bb2VnOc%3D
Attack Vector
CRITICAL Buffer_Improper_Index_Access /modules/core/src/sum.simd.hpp: 446
detailsThe array index sumTab at /modules/core/src/sum.simd.hpp in line 446 is used to reference an index of a cell of the array sumTab at /modules/core...
ID: AfdKZ3HXCfa%2FJe3YgLh6aTMDY20%3D
Attack Vector
CRITICAL Buffer_Improper_Index_Access /modules/core/src/mean.simd.hpp: 320
detailsThe array index sumSqrTab at /modules/core/src/mean.simd.hpp in line 320 is used to reference an index of a cell of the array sumSqrTab at /modul...
ID: NAX3IMvQBCPs94V2PQXsL7AJ9Rg%3D
Attack Vector
CRITICAL Buffer_Improper_Index_Access /modules/core/src/count_non_zero.simd.hpp: 213
detailsThe array index countNonZeroTab at /modules/core/src/count_non_zero.simd.hpp in line 213 is used to reference an index of a cell of the array c...
ID: 7S9kfSrT95zGxHEwo28rgiPcTGk%3D
Attack Vector
CRITICAL Buffer_Improper_Index_Access /modules/core/src/channels.cpp: 89
detailsThe array index mixchTab at /modules/core/src/channels.cpp in line 89 is used to reference an index of a cell of the array mixchTab at /modules/co...
ID: %2BtDEnuo0gDYlvsPhBGxVQDRxz0Q%3D
Attack Vector
CRITICAL Buffer_Improper_Index_Access /modules/core/src/check.cpp: 47
detailsThe array index depthNames at /modules/core/src/check.cpp in line 47 is used to reference an index of a cell of the array depthNames at /modules/c...
ID: 5A2v1BAnaHMqpDMEmixQ2NBsuRc%3D
Attack Vector
CRITICAL Buffer_Improper_Index_Access /apps/traincascade/HOGfeatures.h: 69
detailsThe array index fastRect at /apps/traincascade/HOGfeatures.h in line 69 is used to reference an index of a cell of the array fastRect at /apps/tra...
ID: S%2F6HtAGsoQkqtJqoFpW14fI3tpg%3D
Attack Vector
CRITICAL Buffer_Improper_Index_Access /3rdparty/zlib/zutil.c: 138
detailsThe array index z_errmsg at /3rdparty/zlib/zutil.c in line 138 is used to reference an index of a cell of the array z_errmsg at /3rdparty/zlib/z...
ID: PSMlx2eO8D8Z2S%2BFhQDgRnMpFxw%3D
Attack Vector
CRITICAL Buffer_Improper_Index_Access /apps/traincascade/HOGfeatures.h: 69
detailsThe array index fastRect at /apps/traincascade/HOGfeatures.h in line 69 is used to reference an index of a cell of the array fastRect at /apps/tra...
ID: 3u%2F3CccQ0DljDfmp3T%2BXlNmuhcw%3D
Attack Vector
CRITICAL Buffer_Improper_Index_Access /3rdparty/openjpeg/openjp2/mct.c: 433
detailsThe array index lCurrentResult at /3rdparty/openjpeg/openjp2/mct.c in line 433 is used to reference an index of a cell of the array lCurrentResult...
ID: QoEIO7guGbD4rtpU92leHrv6RaM%3D
Attack Vector
CRITICAL Buffer_Improper_Index_Access /3rdparty/openjpeg/openjp2/mct.c: 430
detailsThe array index lCurrentData at /3rdparty/openjpeg/openjp2/mct.c in line 430 is used to reference an index of a cell of the array lCurrentData at ...
ID: Rj4sK%2BrBrPAf4CRKUhqlyFCBCm0%3D
Attack Vector
CRITICAL Buffer_Improper_Index_Access /apps/traincascade/HOGfeatures.h: 69
detailsThe array index fastRect at /apps/traincascade/HOGfeatures.h in line 69 is used to reference an index of a cell of the array fastRect at /apps/tra...
ID: 0kf%2BKhiwhim8HCZMALbMSq3%2BAHM%3D
Attack Vector
CRITICAL Buffer_Improper_Index_Access /apps/traincascade/HOGfeatures.h: 69
detailsThe array index fastRect at /apps/traincascade/HOGfeatures.h in line 69 is used to reference an index of a cell of the array fastRect at /apps/tra...
ID: FOrSAxajuOizOIK%2FFK5mDdZcrhM%3D
Attack Vector
CRITICAL Buffer_Improper_Index_Access /3rdparty/flatbuffers/include/flatbuffers/struct.h: 38
detailsThe array index data_ at /3rdparty/flatbuffers/include/flatbuffers/struct.h in line 38 is used to reference an index of a cell of the array data...
ID: ehyh2Vpdm6thWcZPMyA5kg0FLgY%3D
Attack Vector
CRITICAL Buffer_Improper_Index_Access /3rdparty/openjpeg/openjp2/mct.c: 384
detailsThe array index lCurrentData at /3rdparty/openjpeg/openjp2/mct.c in line 384 is used to reference an index of a cell of the array lCurrentData at ...
ID: XwpBL1l9ezjUzvjKJgl08HTE8pc%3D
Attack Vector
CRITICAL Buffer_Improper_Index_Access /3rdparty/openjpeg/openjp2/mct.c: 378
detailsThe array index lCurrentMatrix at /3rdparty/openjpeg/openjp2/mct.c in line 378 is used to reference an index of a cell of the array lCurrentMatrix...
ID: p%2BjVsS3CFlDW9pzSR1WIFReBbpc%3D
Attack Vector
CRITICAL Buffer_Improper_Index_Access /3rdparty/libwebp/src/enc/cost_enc.h: 60
detailsThe array index VP8EntropyCost at /3rdparty/libwebp/src/enc/cost_enc.h in line 60 is used to reference an index of a cell of the array VP8Entropy...
ID: g%2BN5p8y5V2CpEUgaLiNFGJBDVjE%3D
Attack Vector
CRITICAL Buffer_Improper_Index_Access /3rdparty/libwebp/src/enc/cost_enc.h: 60
detailsThe array index VP8EntropyCost at /3rdparty/libwebp/src/enc/cost_enc.h in line 60 is used to reference an index of a cell of the array VP8Entropy...
ID: WH20aS6n%2FIb9JCAEx5l95HpjSu4%3D
Attack Vector
CRITICAL Buffer_Improper_Index_Access /3rdparty/flatbuffers/include/flatbuffers/struct.h: 39
detailsThe array index data_ at /3rdparty/flatbuffers/include/flatbuffers/struct.h in line 39 is used to reference an index of a cell of the array data...
ID: 02zgDHkid8qe8%2Bm2vLsD4DOq3Ak%3D
Attack Vector
CRITICAL Buffer_Improper_Index_Access /3rdparty/flatbuffers/include/flatbuffers/struct.h: 31
detailsThe array index data_ at /3rdparty/flatbuffers/include/flatbuffers/struct.h in line 31 is used to reference an index of a cell of the array data...
ID: WUAlp6FTsikMLwMc%2B7or%2BLSbvhw%3D
Attack Vector
CRITICAL Buffer_Improper_Index_Access /3rdparty/flatbuffers/include/flatbuffers/struct.h: 35
detailsThe array index data_ at /3rdparty/flatbuffers/include/flatbuffers/struct.h in line 35 is used to reference an index of a cell of the array data...
ID: Dost4t9dYt3Y6hNxTNCgj5KwMKo%3D
Attack Vector
CRITICAL Buffer_Improper_Index_Access /modules/stitching/src/util.cpp: 79
detailsThe array index size at /modules/stitching/src/util.cpp in line 79 is used to reference an index of a cell of the array size at /modules/stitching...
ID: 0VXdPHPObZVJG11j4dfb%2BSrJIDY%3D
Attack Vector
CRITICAL Buffer_Improper_Index_Access /modules/stitching/src/util.cpp: 90
detailsThe array index size at /modules/stitching/src/util.cpp in line 90 is used to reference an index of a cell of the array size at /modules/stitching...
ID: %2BEDjoyJFAkdHv4rIkk8dkUEf7N4%3D
Attack Vector

More results are available on the CxOne platform

Fixed Issues (76)
Great job! The following issues were fixed in this Pull Request

Severity Issue Source File / Package
HIGH CVE-2021-37997 Npm-electron-15.5.7
HIGH CVE-2021-38005 Npm-electron-15.5.7
HIGH CVE-2021-4053 Npm-electron-15.5.7
HIGH CVE-2022-2399 Npm-electron-15.5.7
HIGH CVE-2022-2607 Npm-electron-15.5.7
HIGH CVE-2022-2609 Npm-electron-15.5.7
HIGH CVE-2022-2617 Npm-electron-15.5.7
HIGH CVE-2022-2854 Npm-electron-15.5.7
HIGH CVE-2022-2998 Npm-electron-15.5.7
HIGH CVE-2022-3051 Npm-electron-15.5.7
HIGH CVE-2022-3052 Npm-electron-15.5.7
HIGH CVE-2022-3071 Npm-electron-15.5.7
HIGH CVE-2022-3308 Npm-electron-15.5.7
HIGH CVE-2022-3657 Npm-electron-15.5.7
HIGH CVE-2022-3887 Npm-electron-15.5.7
HIGH CVE-2022-4452 Npm-electron-15.5.7
HIGH CVE-2023-0474 Npm-electron-15.5.7
HIGH CVE-2023-2135 Npm-electron-15.5.7
HIGH CVE-2023-3732 Npm-electron-15.5.7
HIGH CVE-2023-4074 Npm-electron-15.5.7
HIGH CVE-2023-4428 Npm-electron-15.5.7
HIGH CVE-2023-4429 Npm-electron-15.5.7
HIGH CVE-2023-5854 Npm-electron-15.5.7
HIGH CVE-2023-5857 Npm-electron-15.5.7
HIGH CVE-2023-6348 Npm-electron-15.5.7
HIGH CVE-2024-1673 Npm-electron-15.5.7
HIGH CVE-2024-2886 Npm-electron-15.5.7
HIGH CVE-2024-3832 Npm-electron-15.5.7
HIGH CVE-2024-3833 Npm-electron-15.5.7
HIGH CVE-2024-4761 Npm-electron-15.5.7
HIGH CVE-2024-6100 Npm-electron-15.5.7
HIGH CVE-2024-7023 Npm-electron-15.5.7
HIGH CVE-2024-7534 Npm-electron-15.5.7
HIGH CVE-2024-7973 Npm-electron-15.5.7
HIGH CVE-2024-8194 Npm-electron-15.5.7
HIGH CVE-2024-8636 Npm-electron-15.5.7
HIGH CVE-2024-9959 Npm-electron-15.5.7
HIGH CVE-2025-0291 Npm-electron-15.5.7
HIGH CVE-2025-0999 Npm-electron-15.5.7
HIGH CVE-2025-1915 Npm-electron-15.5.7
MEDIUM CVE-2021-38019 Npm-electron-15.5.7
MEDIUM CVE-2021-42307 Npm-electron-15.5.7
MEDIUM CVE-2022-0455 Npm-electron-15.5.7
MEDIUM CVE-2022-0806 Npm-electron-15.5.7
MEDIUM CVE-2022-21931 Npm-electron-15.5.7
MEDIUM CVE-2022-3310 Npm-electron-15.5.7
MEDIUM CVE-2022-3314 Npm-electron-15.5.7
MEDIUM CVE-2022-41115 Npm-electron-15.5.7
MEDIUM CVE-2022-4908 Npm-electron-15.5.7
MEDIUM CVE-2023-1226 Npm-electron-15.5.7
MEDIUM CVE-2023-4359 Npm-electron-15.5.7
MEDIUM CVE-2023-4906 Npm-electron-15.5.7
MEDIUM CVE-2024-0333 Npm-electron-15.5.7
MEDIUM CVE-2024-1676 Npm-electron-15.5.7
MEDIUM CVE-2024-26163 Npm-electron-15.5.7
MEDIUM CVE-2024-3843 Npm-electron-15.5.7
MEDIUM CVE-2024-7975 Npm-electron-15.5.7
MEDIUM CVE-2024-8907 Npm-electron-15.5.7
MEDIUM Divide_By_Zero /3rdparty/libwebp/src/enc/picture_psnr_enc.c: 128
MEDIUM Divide_By_Zero /modules/dnn/src/cuda/execution.hpp: 51
MEDIUM Divide_By_Zero /3rdparty/libtiff/tif_strip.c: 277
MEDIUM Divide_By_Zero /3rdparty/libtiff/tif_strip.c: 309
MEDIUM Divide_By_Zero /3rdparty/libtiff/tif_strip.c: 287
MEDIUM Divide_By_Zero /3rdparty/libwebp/src/utils/huffman_encode_utils.c: 72
MEDIUM Divide_By_Zero /3rdparty/libwebp/src/utils/huffman_encode_utils.c: 96
MEDIUM Divide_By_Zero /3rdparty/libwebp/src/utils/huffman_encode_utils.c: 72
MEDIUM Divide_By_Zero /3rdparty/libwebp/src/utils/huffman_encode_utils.c: 96
MEDIUM Divide_By_Zero /3rdparty/openexr/IlmImf/ImfRgbaYca.cpp: 413
MEDIUM Divide_By_Zero /modules/flann/include/opencv2/flann/index_testing.h: 109
MEDIUM Divide_By_Zero /modules/features2d/src/kaze/fed.cpp: 75
MEDIUM Divide_By_Zero /modules/core/include/opencv2/core/cuda/filters.hpp: 165
MEDIUM Divide_By_Zero /3rdparty/libwebp/src/utils/huffman_utils.c: 56
MEDIUM Divide_By_Zero /modules/calib3d/src/posit.cpp: 120
MEDIUM Divide_By_Zero /modules/calib3d/src/posit.cpp: 307
MEDIUM Divide_By_Zero /3rdparty/carotene/src/sum.cpp: 303
MEDIUM Divide_By_Zero /modules/calib3d/src/posit.cpp: 142

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
2 participants
@TheRedHatter @snyk-bot