{"id":"EUVD-2026-53442","enisaUuid":"7df743e1-6dc5-36be-9708-2d6589abf089","description":"Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 39.8.8, 40.9.0, 41.2.1, and 42.0.0-beta.3, when following HTTP redirects, net.fetch() and net.request() did not restrict which schemes a redirect could target. A remote server could redirect a request to a local resource, and if the app returns or forwards the response body, local file contents could be disclosed. Apps are only affected if they make net requests to attacker-influenced URLs with redirects followed and expose the response body. This issue is fixed in versions 39.8.8, 40.9.0, 41.2.1, and 42.0.0-beta.3.","datePublished":"Aug 5, 2026, 4:04:12 PM","dateUpdated":"Aug 6, 2026, 2:24:06 PM","baseScore":5.9,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","references":"https://github.com/electron/electron/security/advisories/GHSA-v64r-4m7r-3mvq\n","aliases":"CVE-2026-70605\nGHSA-v64r-4m7r-3mvq\n","assigner":"GitHub_M","epss":0.32,"enisaIdProduct":[{"id":"02553c9b-254c-3657-a729-43a6a858667b","product":{"name":"electron","vendor":{"name":"electron"}},"product_version":"\u003c 39.8.8"},{"id":"940b8a85-ac08-3155-8015-88c95fb3e3eb","product":{"name":"electron","vendor":{"name":"electron"}},"product_version":"40.0.0-alpha.1, \u003c 40.9.0"},{"id":"bf80f564-88c4-3e5f-b1e0-3e4907c24f4d","product":{"name":"electron","vendor":{"name":"electron"}},"product_version":"42.0.0-alpha.1, \u003c 42.0.0-beta.3"},{"id":"e9f66399-b235-39e6-a532-9c249d8d2ba1","product":{"name":"electron","vendor":{"name":"electron"}},"product_version":"41.0.0-alpha.1, \u003c 41.2.1"}],"enisaIdVendor":[{"id":"5fbdddab-5074-3549-8325-91bdcd15169b","vendor":{"name":"electron"}}],"enisaIdVulnerability":[{"id":"119ea505-52db-3d60-8c0d-25a8ef34fdb9","vulnerability":{"id":"CVE-2026-70605","description":"Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 39.8.8, 40.9.0, 41.2.1, and 42.0.0-beta.3, when following HTTP redirects, net.fetch() and net.request() did not restrict which schemes a redirect could target. A remote server could redirect a request to a local resource, and if the app returns or forwards the response body, local file contents could be disclosed. Apps are only affected if they make net requests to attacker-influenced URLs with redirects followed and expose the response body. This issue is fixed in versions 39.8.8, 40.9.0, 41.2.1, and 42.0.0-beta.3.","datePublished":"Aug 5, 2026, 4:04:12 PM","dateUpdated":"Aug 6, 2026, 2:24:06 PM","status":"PUBLISHED","baseScore":5.9,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","references":"https://github.com/electron/electron/security/advisories/GHSA-v64r-4m7r-3mvq\n","enisa_id":"EUVD-2026-53442\n","assigner":"GitHub_M","epss":0.32,"dataProcessed":"Nov 3, 2026, 7:13:01 AM","vulnerabilityProduct":[{"id":"5cf376bb-666e-35c3-b610-7cdbb1f88d99","product":{"name":"electron","vendor":{"name":"electron"}},"product_version":"40.0.0-alpha.1, \u003c 40.9.0"},{"id":"b6658f1e-cec5-380b-b6fd-e30804c73058","product":{"name":"electron","vendor":{"name":"electron"}},"product_version":"\u003c 39.8.8"},{"id":"d3eaf2b7-56cc-3bff-a9d1-b5a9112dcb0a","product":{"name":"electron","vendor":{"name":"electron"}},"product_version":"41.0.0-alpha.1, \u003c 41.2.1"},{"id":"d49fe113-7f1f-3375-b278-43488615952d","product":{"name":"electron","vendor":{"name":"electron"}},"product_version":"42.0.0-alpha.1, \u003c 42.0.0-beta.3"}],"vulnerabilityVendor":[{"id":"34fd3e33-6ea7-3408-8842-f49e623cf24a","vendor":{"name":"electron"}}]}},{"id":"9bb81275-0180-31cf-86b4-6dbab1993d38","vulnerability":{"id":"GHSA-v64r-4m7r-3mvq","description":"Electron: HTTP redirect followed into local file loader","datePublished":"Aug 5, 2026, 4:04:09 PM","dateUpdated":"Aug 5, 2026, 4:04:09 PM","baseScore":0.0,"references":"https://github.com/electron/electron/security/advisories/GHSA-v64r-4m7r-3mvq\nhttps://github.com/electron/electron\n","enisa_id":"EUVD-2026-53442\n","aliases":"CVE-2026-70605\nGHSA-v64r-4m7r-3mvq\n","epss":0.0,"dataProcessed":"Nov 1, 2026, 2:03:49 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}}],"enisaIdAdvisory":[]}