Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:npm/electerm@3.9.5
purl pkg:npm/electerm@3.9.5
Next non-vulnerable version 3.11.11
Latest non-vulnerable version 3.11.11
Risk score 4.0
Vulnerabilities affecting this package (2)
Advisory Summary Fixed in package version
GHSA-v5ff-xmfp-p245
Aliases:
CVE-2026-49255
electerm has Command Injection in File System Operations (rmrf, mv, cp) ### Impact A command injection vulnerability exists in electerm's …
3.11.11
Not vulnerable
GHSA-38j7-23hf-9mhc
Aliases:
CVE-2026-49253
electerm has Path Traversal in Zmodem and Trzsz Download Filename Handling ### Impact A path traversal vulnerability exists in the …
3.11.11
Not vulnerable
Vulnerabilities fixed by this package (1)

Advisory Summary Aliases
GHSA-g29v-q6h7-76wh
electerm's encrypt method not safe enough ### Impact _Insecure sync encryption: deterministic AES-192-CBC with a fixed zero IV, constant KDF … CVE-2026-45787