Skip to content

Security issue in 7zip-bin dependency. #8485

@juancarlosgarcia-arg

Description

@juancarlosgarcia-arg

Electron-Builder Version: 24.13.3
Node Version: 20.16.0
Electron Version: 10.4.7

This issue is not related to your repo or electron -builder itsef, but is just for you to be aware that there is a security issue to one of the dependencies you use:

electron-builder@24.13.3
-- builder-util@24.13.1 -- 7zip-bin@5.2.0

The version 5.2 of the 7zip-bin package is using a very old version of the 7zip distributable console, which implies a security risk. Actually this is preventing me to use electron-builder on my machine, because a security software in my company detect that binary as a security risk.
I already log an issue on the repository owned by develar but i had no response so far.

Metadata

Metadata

Assignees

Labels

No labels
No labels

Type

No type
No fields configured for issues without a type.

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions