noname vulnerabilities

CVEs whose affected-version data names the noname package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-123208High· 8.8

yesterday

noname v1.11.2 through v1.11.6.1 Missing Authentication in Electron Local File Server

noname Electron desktop build v1.11.2 through v1.11.6.1 contains an unauthenticated local file server with wildcard CORS that allows malicious websites to read, overwrite, or delete installation files. Attackers can send cross-origin req…

▾ Twilightlibnoname · nonamevia CVEORG