GHSA-7rvm-xjpp-63r9
NoneCVSS
—
EPSS
—
Published
Jun 8, 2026
CISA due date
—
The record
actual Allows Electron to Run As Node
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| npm | actual | 0 | 26.5.0 |
Related vulnerabilities
- CVE-2026-42890 Actual is an open-source personal finance application. Same vulnerability
- CVE-2026-79942 Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions… CWE-250
- CVE-2026-87506 Privilege elevation in WebUI in Google Chrome prior to 153.0.8010.36 allowed a remote… CWE-250
- CVE-2026-69464 Execution with unnecessary privileges in Microsoft Office SharePoint allows an authorized… CWE-250
- CVE-2026-69409 Execution with unnecessary privileges in Microsoft Office SharePoint allows an authorized… CWE-250
- CVE-2026-80238 Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions… CWE-250
- CVE-2026-83534 PostgreSQL Anonymizer contains a vulnerability in the anon.anonymize_database_parallel()… CWE-250
- CVE-2026-72654 Execution with Unnecessary Privileges (CWE-250) in the Kibana machine learning feature… CWE-250