Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2021-41392
9.8
CRITICALCVSS v3
Published
September 17, 2021
CVSS v2
7.5 HIGH
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
static/main-preload.js in Boost Note through 0.22.0 allows remote command execution. A remote attacker may send a crafted IPC message to the exposed vulnerable ipcRenderer IPC interface, which invokes the dangerous openExternal Electron API.
BoostIO/BoostNote-App
GitHubBoost Note is a document driven project management tool that maximizes remote DevOps team velocity.
GitHubBoost Note is a document driven project management tool that maximizes remote DevOps team velocity.NVD