mjgardner, 8 months ago

@delfuego @TomSellers @electronjs Expanded to check against all #libwebp-patched #Electron versions:

find /Applications -type f -name 'Electron Framework' -exec \
perl -Mversion=0.77 -nE \
'@safe = map version->parse($), qw(22.3.24 24.8.3 25.8.1 26.2.1);
next unless m{Chrome/[0-9.]+ Electron/([0-9.]+)}; $ver = version->parse($1);
if ($ver < (grep int $->numify >= int $ver->numify, @safe)[0]) {
say "vulnerable Electron $ver found in $ARGV"; next
}' {} ;