Squirrel/Squirrel.Windows

Releases65

Frequency1 month 3 days

Last Release over 5 years ago

Stars7.96K

An installation and update framework for Windows desktop apps

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2022-46330 ↗	Dec 21, 2022Wednesday, 21 December 2022, 09:15	7.8 HIGH	—
Squirrel.Windows is both a toolset and a library that provides installation and update functionality for Windows desktop applications. Installers generated by Squirrel.Windows 2.0.1 and earlier contain an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries. As a result, arbitrary code may be executed with the privilege of the user invoking the installer.