CVE-2026-90491 | sanjevirau gsubs up to 1.0.3 Electron renderer/index.js showQuerySuccessPage filename code injection (EUVD-2026-76933)

A vulnerability was found in sanjevirau gsubs up to 1.0.3 and classified as critical. Impacted is the function showQuerySuccessPage of the file renderer/index.js of the component Electron. Executing a manipulation of the argument filename can lead to code injection. This vulnerability appears as CVE-2026-90491. The attack may be performed from... Weiterlesen