Known Vulnerabilities for App-builder-lib by Electron-userland
Listed below are 10 of the newest known vulnerabilities associated with "App-builder-lib" by "Electron-userland".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-57664 json | Unauthenticated Sensitive Data Exposure in Bopo – WooCommerce Product Bundle Builder <= 1.1.6 versions. | Not Provided | 2026-06-26 | 2026-06-26 |
| CVE-2026-57619 json | Contributor Sensitive Data Exposure in Elementor Website Builder <= 4.1.3 versions. | Not Provided | 2026-06-25 | 2026-06-25 |
| CVE-2026-57337 json | Unauthenticated Cross Site Scripting (XSS) in Landing Page Builder <= 1.5.3.5 versions. | Not Provided | 2026-06-29 | 2026-06-29 |
| CVE-2026-56334 json | Capgo before 12.128.2 lacks an UPDATE row-level security policy for the build_requests table, preventing API-key and anonymou... | Not Provided | 2026-06-30 | 2026-07-01 |
| CVE-2026-56316 json | Cap-go before 12.128.2 contains an information disclosure vulnerability in the OPTIONS /build/upload/:jobId/* endpoint that a... | Not Provided | 2026-06-21 | 2026-06-24 |
| CVE-2026-56290 json | The Joomla extension Page Builder CK is vulnerable to an unauthenticated arbitrary file upload that allows uploading executab... | Not Provided | 2026-06-29 | 2026-07-01 |
| CVE-2026-56233 json | Capgo before 12.128.2 contains a path traversal vulnerability in the builder upload proxy that allows authenticated users wit... | Not Provided | 2026-06-30 | 2026-07-01 |
| CVE-2026-56231 json | Capgo before 12.128.2 contains a broken object level authorization (BOLA) vulnerability in the POST /build/start/:jobId and P... | Not Provided | 2026-06-24 | 2026-06-25 |
| CVE-2026-56052 json | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in FunnelKit Funnel Builde... | Not Provided | 2026-06-24 | 2026-06-24 |
| CVE-2026-56009 json | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bricksable for Bricks B... | Not Provided | 2026-06-18 | 2026-06-18 |