Electron is an open source framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. From versions 30.0.0-alpha.1 to before 30.0.5 31.0.0-alpha.1 31.0.0-beta.1, Electron vulnerable ASAR Integrity bypass. This only impacts apps that have the embeddedAsarIntegrityValidation onlyLoadAppFromAsar fuses enabled. Apps without these enabled are not impacted. issue specific Windows, on macOS Specifically this can be exploited if app launched from a filesystem attacker has write access too. i.e. ability edit files inside .app bundle which supposed protect against. been patched in 31.0.0-beta.1. There no workarounds issue.