Skip to content

Update dependencies (#672): Electron 44, jQuery 3.7.1, Semantic UI 2.5.0, n-readlines 3, actions v7 / Node 24 - #673

Merged
danoli3 merged 1 commit into
openframeworks:masterfrom
danoli3:dependency-updates
Oct 22, 2026
Merged

Update dependencies (#672): Electron 44, jQuery 3.7.1, Semantic UI 2.5.0, n-readlines 3, actions v7 / Node 24#673
danoli3 merged 1 commit into
openframeworks:masterfrom
danoli3:dependency-updates

Conversation

@danoli3

@danoli3 danoli3 commented Oct 22, 2026

Copy link
Copy Markdown
Member

Refs #672

Applies the updates from the weekly dependency check. GUI version 0.104.0 -> 0.105.0.

npm

from to
electron 43.5.0 (Chromium 150.0.7871.250, Node 24.19.0) 44.9.3 (Chromium 152.0.7977.167, Node 24.22.0)
n-readlines 1.0.3 3.4.1 (next() returns null at EOF instead of false; the while (line = liner.next()) loop works with both)
@types/jquery 3.5.32 3.5.34 (held at 3.x, see below)

Electron 44 drops macOS 12 (needs macOS 13+) and 32-bit Windows / Linux armv7l; the GUI doesn't ship any of those. None of the removed APIs (renderer clipboard, openAsHidden) are used. Electron 45.0.0 came out on 2026-10-21; its breaking changes don't affect PG either (the preload only uses contextBridge / ipcRenderer / webUtils), but it's left for a later bump once it has a patch release.

Vendored

from to
jQuery 2.1.3 3.7.1
Semantic UI 2.0.8 2.5.0 (css, js, default theme fonts)

jQuery 4.0.0 isn't usable yet: Semantic UI 2.x calls $.isArray, $.isFunction, $.trim, $.type and $.isWindow, which jQuery 4 removed. The dependency check now holds jQuery and @types/jquery at 3.x (reports the newest 3.x with a note) so it stops flagging 4.0.

GitHub Actions

  • actions/checkout v4 -> v7, actions/setup-node v4 -> v7 (Node 24 runtime)
  • microsoft/setup-msbuild v2 -> v3, softprops/action-gh-release v2.0.8 -> v3.0.3 (Node 24 runtime)
  • hendrikmuhs/ccache-action 1.2.14 -> 1.2.24
  • build-vs Node 22 -> 24 (current LTS)

Tested (macOS arm64)

  • GUI on Electron 44.9.3 / jQuery 3.7.1 / Semantic UI 2.5.0: create, downloads, settings tabs and the platform / template dropdowns render the same as before (screenshots compared), all icons used exist in the new icon font.
  • Template list (n-readlines template.config parsing) enables / disables templates per platform as before.
  • Generated a project from the GUI.
  • scripts/check-dependency-versions.sh now reports only Electron 45.

@danoli3
Update dependencies (openframeworks#672): Electron 44.9.3, n-readline…
f581673 
…s 3.4.1, jQuery 3.7.1, Semantic UI 2.5.0, actions checkout/setup-node v7, setup-msbuild v3, action-gh-release v3.0.3, ccache-action 1.2.24, Node 24; hold jQuery at 3.x in the dependency check; GUI 0.105.0
@danoli3 danoli3 mentioned this pull request Oct 22, 2026
Open
@danoli3

danoli3 commented Oct 22, 2026

Copy link
Copy Markdown
Member Author

CVEs fixed by this PR

jQuery 2.1.3 -> 3.7.1

CVE Fixed in Issue
CVE-2015-9251 3.0.0 cross-domain $.ajax responses with text/javascript executed without dataType (XSS)
CVE-2019-11358 3.4.0 $.extend(true, ...) prototype pollution via __proto__
CVE-2020-11022 3.5.0 HTML passed to DOM manipulation methods could run untrusted code (XSS)
CVE-2020-11023 3.5.0 same, for HTML containing <option> elements (XSS)

Electron 43.5.0 -> 44.9.3 (Chromium 150.0.7871.250 -> 152.0.7977.167)

831 Chromium CVEs: 33 Critical, 232 High, 367 Medium, 199 Low, from the Chrome desktop bulletins for 151 and 152 up to 152.0.7977.167, minus any already listed for 150.

Important

CVE-2026-85046 (High, Type confusion in V8) was exploited in the wild; fixed in Chrome 152.0.7977.82.

Chromium 150.0.7871.250 was an Extended Stable build, and those bulletins don't list CVE IDs, so a few of these (High / Critical backports) may already have been in Electron 43.5.0. Bulletins:
151.0.7922.71 · 151.0.7922.108 · 151.0.7922.137 · 151.0.7922.169 · 151.0.7922.173 · 152.0.7977.64 · 152.0.7977.75 · 152.0.7977.82 · 152.0.7977.167

Critical (33)
CVE Issue Chrome
CVE-2026-17650 Use after free in Compositing 151.0.7922.71
CVE-2026-17651 Insufficient validation of untrusted input in Dawn 151.0.7922.71
CVE-2026-17652 Use after free in Views 151.0.7922.71
CVE-2026-17653 Use after free in Skia 151.0.7922.71
CVE-2026-17654 Race in Updater 151.0.7922.71
CVE-2026-17655 Insufficient validation of untrusted input in ANGLE 151.0.7922.71
CVE-2026-17656 Use after free in Ozone 151.0.7922.71
CVE-2026-19137 Use after free in WebGL 151.0.7922.108
CVE-2026-19149 Use after free in Aura 151.0.7922.108
CVE-2026-19154 Use after free in Skia 151.0.7922.108
CVE-2026-19157 Out of bounds write in ANGLE 151.0.7922.108
CVE-2026-19170 Use after free in WebGL 151.0.7922.108
CVE-2026-19172 Use after free in Views 151.0.7922.108
CVE-2026-76034 Buffer overflow in WebGL 151.0.7922.169
CVE-2026-76036 Buffer overflow in Dawn 151.0.7922.169
CVE-2026-76017 Use after free in Chromoting 151.0.7922.173
CVE-2026-78935 Use of uninitialized variable in Mobile 152.0.7977.64
CVE-2026-79012 Use after free in Safebrowsing 152.0.7977.64
CVE-2026-79052 Use after free in Aura 152.0.7977.64
CVE-2026-79054 Use after free in Chromecast 152.0.7977.64
CVE-2026-79121 Improper input validation in Chromecast 152.0.7977.64
CVE-2026-79150 Use after free in Views 152.0.7977.64
CVE-2026-79200 Use after free in Aura 152.0.7977.64
CVE-2026-79224 Use after free in Chromecast 152.0.7977.64
CVE-2026-79282 Use after free in ANGLE 152.0.7977.64
CVE-2026-79290 Use after free in Aura 152.0.7977.64
CVE-2026-84352 Use after free in WebGL 152.0.7977.75
CVE-2026-84353 Use after free in Shared Tab Groups 152.0.7977.75
CVE-2026-106347 Use after free in Track 152.0.7977.167
CVE-2026-106358 Use after free in Navigation 152.0.7977.167
CVE-2026-110136 Use after free in PDF 152.0.7977.167
CVE-2026-110148 Use after free in SVG 152.0.7977.167
CVE-2026-110161 Use after free in Network 152.0.7977.167
High (232)
CVE Issue Chrome
CVE-2026-17657 Use after free in Navigation 151.0.7922.71
CVE-2026-17658 Use after free in V8 151.0.7922.71
CVE-2026-17659 Inappropriate implementation in SiteIsolation 151.0.7922.71
CVE-2026-17660 Insufficient validation of untrusted input in Network 151.0.7922.71
CVE-2026-17661 Use after free in Loader 151.0.7922.71
CVE-2026-17662 Insufficient policy enforcement in Prefetch 151.0.7922.71
CVE-2026-17663 Insufficient validation of untrusted input in GPU 151.0.7922.71
CVE-2026-17664 Insufficient validation of untrusted input in Loader 151.0.7922.71
CVE-2026-17665 Use after free in V8 151.0.7922.71
CVE-2026-17666 Cryptographic Flaw in Enterprise 151.0.7922.71
CVE-2026-17667 Uninitialized Use in ANGLE 151.0.7922.71
CVE-2026-17668 Uninitialized Use in ANGLE 151.0.7922.71
CVE-2026-17669 Inappropriate implementation in Chrome for iOS 151.0.7922.71
CVE-2026-17670 Use after free in Views 151.0.7922.71
CVE-2026-17671 Insufficient validation of untrusted input in ANGLE 151.0.7922.71
CVE-2026-17672 Insufficient validation of untrusted input in Chromecast 151.0.7922.71
CVE-2026-17673 Integer overflow in QUIC 151.0.7922.71
CVE-2026-17674 Inappropriate implementation in HTML 151.0.7922.71
CVE-2026-17675 Out of bounds write in ANGLE 151.0.7922.71
CVE-2026-17676 Inappropriate implementation in ANGLE 151.0.7922.71
CVE-2026-17677 Inappropriate implementation in ANGLE 151.0.7922.71
CVE-2026-17678 Out of bounds read in ANGLE 151.0.7922.71
CVE-2026-17679 Insufficient validation of untrusted input in Print Preview 151.0.7922.71
CVE-2026-17680 Heap buffer overflow in Color 151.0.7922.71
CVE-2026-17681 Insufficient validation of untrusted input in Web Authentication 151.0.7922.71
CVE-2026-17682 Integer overflow in ANGLE 151.0.7922.71
CVE-2026-17683 Inappropriate implementation in ANGLE 151.0.7922.71
CVE-2026-17684 Insufficient validation of untrusted input in Chrome for iOS 151.0.7922.71
CVE-2026-17685 Use after free in Autofill 151.0.7922.71
CVE-2026-17686 Insufficient validation of untrusted input in Passwords 151.0.7922.71
CVE-2026-17687 Type Confusion in ANGLE 151.0.7922.71
CVE-2026-17688 Use after free in Input 151.0.7922.71
CVE-2026-17689 Uninitialized Use in ANGLE 151.0.7922.71
CVE-2026-17690 Insufficient validation of untrusted input in PDF 151.0.7922.71
CVE-2026-17691 Out of bounds write in ANGLE 151.0.7922.71
CVE-2026-17692 Use after free in DataTransfer 151.0.7922.71
CVE-2026-17693 Inappropriate implementation in FileSystem 151.0.7922.71
CVE-2026-17694 Use after free in DOM 151.0.7922.71
CVE-2026-17695 Inappropriate implementation in ANGLE 151.0.7922.71
CVE-2026-17696 Side-channel information leakage in Media 151.0.7922.71
CVE-2026-17697 Type Confusion in ANGLE 151.0.7922.71
CVE-2026-17698 Insufficient validation of untrusted input in UI 151.0.7922.71
CVE-2026-17699 Use after free in Views 151.0.7922.71
CVE-2026-17700 Insufficient validation of untrusted input in Actor 151.0.7922.71
CVE-2026-17701 Out of bounds read in ANGLE 151.0.7922.71
CVE-2026-17702 Inappropriate implementation in Skia 151.0.7922.71
CVE-2026-17703 Policy bypass in Chrome for iOS 151.0.7922.71
CVE-2026-17704 Use after free in ANGLE 151.0.7922.71
CVE-2026-17705 Integer overflow in libxml 151.0.7922.71
CVE-2026-17706 Insufficient validation of untrusted input in Media 151.0.7922.71
CVE-2026-17707 Uninitialized Use in Media 151.0.7922.71
CVE-2026-17708 Use after free in Audio 151.0.7922.71
CVE-2026-17709 Race in Downloads 151.0.7922.71
CVE-2026-17710 Inappropriate implementation in MHTML 151.0.7922.71
CVE-2026-17711 Race in Downloads 151.0.7922.71
CVE-2026-17712 Race in Skia 151.0.7922.71
CVE-2026-17713 Insufficient validation of untrusted input in Accessibility 151.0.7922.71
CVE-2026-17714 Uninitialized Use in ANGLE 151.0.7922.71
CVE-2026-17715 Inappropriate implementation in Passwords 151.0.7922.71
CVE-2026-17716 Use after free in Updater 151.0.7922.71
CVE-2026-17717 Integer overflow in ANGLE 151.0.7922.71
CVE-2026-17718 Use after free in ANGLE 151.0.7922.71
CVE-2026-17719 Use after free in Input 151.0.7922.71
CVE-2026-17720 Insufficient policy enforcement in Passwords 151.0.7922.71
CVE-2026-17721 Out of bounds write in ANGLE 151.0.7922.71
CVE-2026-17722 Object lifecycle issue in WebView 151.0.7922.71
CVE-2026-17723 Use after free in Media 151.0.7922.71
CVE-2026-17724 Race in Chrome for iOS 151.0.7922.71
CVE-2026-17725 Type Confusion in V8 151.0.7922.71
CVE-2026-17726 Integer overflow in WebGL 151.0.7922.71
CVE-2026-17727 Out of bounds write in WebGL 151.0.7922.71
CVE-2026-19138 Heap buffer overflow in CrashReporting 151.0.7922.108
CVE-2026-19139 Race in CredentialProvider 151.0.7922.108
CVE-2026-19140 Use after free in GPU 151.0.7922.108
CVE-2026-19141 Use after free in Resources 151.0.7922.108
CVE-2026-19142 Use after free in Views 151.0.7922.108
CVE-2026-19143 Insufficient validation of untrusted input in WebAPKs 151.0.7922.108
CVE-2026-19144 Use after free in HTML 151.0.7922.108
CVE-2026-19145 Use after free in Translate 151.0.7922.108
CVE-2026-19146 Uninitialized Use in GPU 151.0.7922.108
CVE-2026-19147 Use after free in Aura 151.0.7922.108
CVE-2026-19148 Out of bounds write in GPU 151.0.7922.108
CVE-2026-19150 Inappropriate implementation in V8 151.0.7922.108
CVE-2026-19151 Use after free in V8 151.0.7922.108
CVE-2026-19152 Inappropriate implementation in Navigation 151.0.7922.108
CVE-2026-19153 Insufficient validation of untrusted input in Workers 151.0.7922.108
CVE-2026-19155 Use after free in Payments 151.0.7922.108
CVE-2026-19156 Heap buffer overflow in Base 151.0.7922.108
CVE-2026-19158 Use after free in Views 151.0.7922.108
CVE-2026-19159 Use after free in Views 151.0.7922.108
CVE-2026-19160 Uninitialized Use in Skia 151.0.7922.108
CVE-2026-19161 Uninitialized Use in Skia 151.0.7922.108
CVE-2026-19162 Out of bounds write in V8 151.0.7922.108
CVE-2026-19163 Use after free in Media 151.0.7922.108
CVE-2026-19164 Insufficient validation of untrusted input in Codecs 151.0.7922.108
CVE-2026-19165 Use after free in Extensions 151.0.7922.108
CVE-2026-19166 Use after free in Web Authentication 151.0.7922.108
CVE-2026-19167 Integer overflow in GPU 151.0.7922.108
CVE-2026-19168 Inappropriate implementation in V8 151.0.7922.108
CVE-2026-19169 Insufficient validation of untrusted input in Contextual Tasks 151.0.7922.108
CVE-2026-19171 Use after free in Media 151.0.7922.108
CVE-2026-19173 Out of bounds write in Skia 151.0.7922.108
CVE-2026-19174 Integer overflow in V8 151.0.7922.108
CVE-2026-19176 Use after free in Skia 151.0.7922.108
CVE-2026-19177 Insufficient validation of untrusted input in UI 151.0.7922.108
CVE-2026-19556 Use after free in V8 151.0.7922.137
CVE-2026-19557 Use after free in TabStrip 151.0.7922.137
CVE-2026-19558 Use after free in Extensions 151.0.7922.137
CVE-2026-19559 Use after free in HTML 151.0.7922.137
CVE-2026-19560 Use after free in Blink 151.0.7922.137
CVE-2026-76033 Inappropriate implementation in CORS 151.0.7922.169
CVE-2026-76035 Inappropriate implementation in Media 151.0.7922.169
CVE-2026-76037 Link following in CredentialProvider 151.0.7922.169
CVE-2026-76038 Type confusion in V8 151.0.7922.169
CVE-2026-76039 Incorrect reference resolution in Core 151.0.7922.169
CVE-2026-76040 Use after free in Browser 151.0.7922.169
CVE-2026-76041 Information leak in Skia 151.0.7922.169
CVE-2026-76042 Use of uninitialized resource in GPU 151.0.7922.169
CVE-2026-76043 Incorrect calculation in V8 151.0.7922.169
CVE-2026-76044 Race condition in USB 151.0.7922.169
CVE-2026-76045 Use after free in WebGL 151.0.7922.169
CVE-2026-76046 Buffer overflow in ANGLE 151.0.7922.169
CVE-2026-76047 Type confusion in V8 151.0.7922.169
CVE-2026-76018 Privilege elevation in Import 151.0.7922.173
CVE-2026-76019 Incorrect authorization in Workers 151.0.7922.173
CVE-2026-76020 Race condition in V8 151.0.7922.173
CVE-2026-76021 Use after free in DOM 151.0.7922.173
CVE-2026-76022 Buffer overflow in Network 151.0.7922.173
CVE-2026-76023 Improper resource control in Linux Toolkit Theming 151.0.7922.173
CVE-2026-78895 Information leak in Paint 152.0.7977.64
CVE-2026-78899 Use after free in V8 152.0.7977.64
CVE-2026-78900 Improper input validation in Media 152.0.7977.64
CVE-2026-78904 Type confusion in ANGLE 152.0.7977.64
CVE-2026-78908 Information leak in Canvas 152.0.7977.64
CVE-2026-78911 Incorrect authorization in USB 152.0.7977.64
CVE-2026-78934 Race condition in ReadAloud 152.0.7977.64
CVE-2026-78938 Type confusion in V8 152.0.7977.64
CVE-2026-78939 Use after free in Chromecast 152.0.7977.64
CVE-2026-78948 Buffer overflow in WebGL 152.0.7977.64
CVE-2026-78952 Out of bounds write in Crashpad 152.0.7977.64
CVE-2026-78954 Incorrect authorization in Extensions 152.0.7977.64
CVE-2026-78965 Uninitialized resource in ANGLE 152.0.7977.64
CVE-2026-78986 Uninitialized resource in GPU 152.0.7977.64
CVE-2026-78989 Out of bounds read in ANGLE 152.0.7977.64
CVE-2026-79011 UI misrepresentation in Browser 152.0.7977.64
CVE-2026-79014 Race condition in Autofill 152.0.7977.64
CVE-2026-79019 Out of bounds write in ANGLE 152.0.7977.64
CVE-2026-79026 Use after free in Extensions 152.0.7977.64
CVE-2026-79027 Use after free in WebRTC 152.0.7977.64
CVE-2026-79039 Use after free in Mobile 152.0.7977.64
CVE-2026-79043 Out of bounds write in ANGLE 152.0.7977.64
CVE-2026-79047 Use after free in Views 152.0.7977.64
CVE-2026-79048 Out of bounds write in ANGLE 152.0.7977.64
CVE-2026-79069 Memory corruption in Tint 152.0.7977.64
CVE-2026-79072 Improper state validation in Performance 152.0.7977.64
CVE-2026-79078 Use after free in FedCM 152.0.7977.64
CVE-2026-79082 Incorrect authorization in Transactions Platform 152.0.7977.64
CVE-2026-79093 Incorrect authorization in Paint 152.0.7977.64
CVE-2026-79111 Improper input validation in Dawn 152.0.7977.64
CVE-2026-79117 Race condition in WebAppInstalls 152.0.7977.64
CVE-2026-79118 Uninitialized resource in ANGLE 152.0.7977.64
CVE-2026-79130 Buffer overflow in ANGLE 152.0.7977.64
CVE-2026-79131 Out of bounds write in ANGLE 152.0.7977.64
CVE-2026-79138 Out of bounds write in ANGLE 152.0.7977.64
CVE-2026-79142 Buffer overflow in ANGLE 152.0.7977.64
CVE-2026-79149 Use after free in ANGLE 152.0.7977.64
CVE-2026-79155 Race condition in FileSystem 152.0.7977.64
CVE-2026-79174 Incorrect authorization in Extensions 152.0.7977.64
CVE-2026-79175 Type confusion in Accessibility 152.0.7977.64
CVE-2026-79183 Use after free in Accessibility 152.0.7977.64
CVE-2026-79187 Use after free in WebRTC 152.0.7977.64
CVE-2026-79188 Out of bounds write in ANGLE 152.0.7977.64
CVE-2026-79189 Out of bounds write in ANGLE 152.0.7977.64
CVE-2026-79194 Use after free in Chromoting 152.0.7977.64
CVE-2026-79195 Use after free in Script 152.0.7977.64
CVE-2026-79198 Use after free in Platform 152.0.7977.64
CVE-2026-79202 Use after free in Chromecast 152.0.7977.64
CVE-2026-79212 Missing authorization in Passwords 152.0.7977.64
CVE-2026-79218 Incorrect authorization in Sandbox 152.0.7977.64
CVE-2026-79219 Use after free in Bluetooth 152.0.7977.64
CVE-2026-79232 Use after free in Aura 152.0.7977.64
CVE-2026-79235 Use after free in WebGL 152.0.7977.64
CVE-2026-79236 Type confusion in V8 152.0.7977.64
CVE-2026-79240 Out of bounds write in ANGLE 152.0.7977.64
CVE-2026-79247 Use after free in Chromoting 152.0.7977.64
CVE-2026-79257 Use after free in Views 152.0.7977.64
CVE-2026-79274 Information leak in GPU 152.0.7977.64
CVE-2026-79275 Use after free in ANGLE 152.0.7977.64
CVE-2026-79288 Improper input validation in Autofill 152.0.7977.64
CVE-2026-79292 Integer overflow in Chromecast 152.0.7977.64
CVE-2026-84324 Use after free in Proxy 152.0.7977.75
CVE-2026-84325 Improper input validation in DataTransfer 152.0.7977.75
CVE-2026-84326 Uninitialized resource in V8 152.0.7977.75
CVE-2026-84333 Use after free in Dawn 152.0.7977.75
CVE-2026-84349 Use after free in Browser 152.0.7977.75
CVE-2026-84351 Buffer overflow in GPU 152.0.7977.75
CVE-2026-84354 Incorrect authorization in FileSystem 152.0.7977.75
CVE-2026-84357 Improper input validation in Omnibox 152.0.7977.75
CVE-2026-84359 Information leak in Skia 152.0.7977.75
CVE-2026-85042 Use after free in DevTools 152.0.7977.82
CVE-2026-85043 Incomplete cleanup in Network 152.0.7977.82
CVE-2026-85045 Race condition in V8 152.0.7977.82
CVE-2026-85046 Type confusion in V8 152.0.7977.82
CVE-2026-85048 Use after free in Compositing 152.0.7977.82
CVE-2026-85049 Use after free in Skia 152.0.7977.82
CVE-2026-85050 Out of bounds write in WebGL 152.0.7977.82
CVE-2026-85051 Type confusion in Compositing 152.0.7977.82
CVE-2026-85052 Out of bounds read in CrashReporting 152.0.7977.82
CVE-2026-85053 Improper resource exposure in CacheStorage 152.0.7977.82
CVE-2026-106184 Uninitialized resource in Media 152.0.7977.167
CVE-2026-106200 Use after free in Track 152.0.7977.167
CVE-2026-106235 Use after free in WebAudio 152.0.7977.167
CVE-2026-106383 Use after free in Media 152.0.7977.167
CVE-2026-110139 Use after free in Media 152.0.7977.167
CVE-2026-110140 Type confusion in V8 152.0.7977.167
CVE-2026-110141 Observable discrepancy in Media 152.0.7977.167
CVE-2026-110147 Use after free in PDF 152.0.7977.167
CVE-2026-110153 Use after free in Media 152.0.7977.167
CVE-2026-110155 Buffer overflow in PDFium 152.0.7977.167
CVE-2026-110156 Incorrect reference resolution in Extensions 152.0.7977.167
CVE-2026-110157 Use after free in SVG 152.0.7977.167
CVE-2026-110160 Missing authorization in ReadingMode 152.0.7977.167
CVE-2026-110162 Use after free in Desktop 152.0.7977.167
CVE-2026-110163 Use after free in DOM 152.0.7977.167
CVE-2026-110164 Use after free in DOM 152.0.7977.167
CVE-2026-110167 Use after free in Media 152.0.7977.167
CVE-2026-110170 Use after free in Bindings 152.0.7977.167
CVE-2026-110171 Use after free in Media 152.0.7977.167
CVE-2026-19175 Use after free in Payments 152.0.7977.167
CVE-2026-87474 Use after free in Payments 152.0.7977.167
CVE-2026-87558 Use after free in Payments 152.0.7977.167
CVE-2026-87581 Use after free in Payments 152.0.7977.167
Medium (367)

CVE-2026-17728, CVE-2026-17729, CVE-2026-17730, CVE-2026-17731, CVE-2026-17732, CVE-2026-17733, CVE-2026-17734, CVE-2026-17735, CVE-2026-17736, CVE-2026-17737, CVE-2026-17738, CVE-2026-17739, CVE-2026-17740, CVE-2026-17741, CVE-2026-17742, CVE-2026-17743, CVE-2026-17744, CVE-2026-17745, CVE-2026-17746, CVE-2026-17747, CVE-2026-17748, CVE-2026-17749, CVE-2026-17750, CVE-2026-17751, CVE-2026-17752, CVE-2026-17753, CVE-2026-17754, CVE-2026-17755, CVE-2026-17756, CVE-2026-17757, CVE-2026-17758, CVE-2026-17759, CVE-2026-17760, CVE-2026-17761, CVE-2026-17762, CVE-2026-17763, CVE-2026-17764, CVE-2026-17765, CVE-2026-17766, CVE-2026-17767, CVE-2026-17768, CVE-2026-17769, CVE-2026-17770, CVE-2026-17771, CVE-2026-17772, CVE-2026-17773, CVE-2026-17774, CVE-2026-17775, CVE-2026-17776, CVE-2026-17777, CVE-2026-17778, CVE-2026-17779, CVE-2026-17780, CVE-2026-17781, CVE-2026-17782, CVE-2026-17783, CVE-2026-17784, CVE-2026-17785, CVE-2026-17786, CVE-2026-17787, CVE-2026-17788, CVE-2026-17789, CVE-2026-17790, CVE-2026-17791, CVE-2026-17792, CVE-2026-17793, CVE-2026-17794, CVE-2026-17795, CVE-2026-17796, CVE-2026-17797, CVE-2026-17798, CVE-2026-17799, CVE-2026-17800, CVE-2026-17801, CVE-2026-17802, CVE-2026-17803, CVE-2026-17804, CVE-2026-17805, CVE-2026-17806, CVE-2026-17807, CVE-2026-17808, CVE-2026-17809, CVE-2026-17810, CVE-2026-17811, CVE-2026-17812, CVE-2026-17813, CVE-2026-17814, CVE-2026-17815, CVE-2026-17816, CVE-2026-17817, CVE-2026-17818, CVE-2026-17819, CVE-2026-17820, CVE-2026-17821, CVE-2026-17822, CVE-2026-17823, CVE-2026-17824, CVE-2026-17825, CVE-2026-17826, CVE-2026-17827, CVE-2026-17828, CVE-2026-17829, CVE-2026-17830, CVE-2026-17831, CVE-2026-17832, CVE-2026-17833, CVE-2026-17834, CVE-2026-17835, CVE-2026-17836, CVE-2026-17837, CVE-2026-17838, CVE-2026-17839, CVE-2026-17840, CVE-2026-17841, CVE-2026-17842, CVE-2026-17843, CVE-2026-17844, CVE-2026-17845, CVE-2026-17846, CVE-2026-17847, CVE-2026-17848, CVE-2026-17849, CVE-2026-17850, CVE-2026-17851, CVE-2026-17852, CVE-2026-17853, CVE-2026-17854, CVE-2026-17855, CVE-2026-17856, CVE-2026-17857, CVE-2026-17858, CVE-2026-17859, CVE-2026-17860, CVE-2026-17861, CVE-2026-17862, CVE-2026-17863, CVE-2026-17864, CVE-2026-17865, CVE-2026-17866, CVE-2026-17867, CVE-2026-17868, CVE-2026-17869, CVE-2026-17870, CVE-2026-17871, CVE-2026-17872, CVE-2026-17873, CVE-2026-17874, CVE-2026-17875, CVE-2026-17876, CVE-2026-17877, CVE-2026-17878, CVE-2026-17879, CVE-2026-17880, CVE-2026-17881, CVE-2026-17882, CVE-2026-17883, CVE-2026-17884, CVE-2026-17885, CVE-2026-17886, CVE-2026-17887, CVE-2026-17888, CVE-2026-17889, CVE-2026-17890, CVE-2026-17891, CVE-2026-17892, CVE-2026-17893, CVE-2026-17894, CVE-2026-17895, CVE-2026-17896, CVE-2026-17897, CVE-2026-78891, CVE-2026-78892, CVE-2026-78893, CVE-2026-78894, CVE-2026-78898, CVE-2026-78901, CVE-2026-78903, CVE-2026-78905, CVE-2026-78906, CVE-2026-78907, CVE-2026-78909, CVE-2026-78910, CVE-2026-78912, CVE-2026-78913, CVE-2026-78936, CVE-2026-78937, CVE-2026-78940, CVE-2026-78941, CVE-2026-78942, CVE-2026-78943, CVE-2026-78944, CVE-2026-78945, CVE-2026-78949, CVE-2026-78951, CVE-2026-78953, CVE-2026-78955, CVE-2026-78958, CVE-2026-78959, CVE-2026-78960, CVE-2026-78961, CVE-2026-78962, CVE-2026-78963, CVE-2026-78966, CVE-2026-78967, CVE-2026-78969, CVE-2026-78975, CVE-2026-78976, CVE-2026-78978, CVE-2026-78983, CVE-2026-78984, CVE-2026-78985, CVE-2026-78987, CVE-2026-78990, CVE-2026-78991, CVE-2026-78999, CVE-2026-79002, CVE-2026-79003, CVE-2026-79004, CVE-2026-79006, CVE-2026-79007, CVE-2026-79008, CVE-2026-79010, CVE-2026-79013, CVE-2026-79016, CVE-2026-79020, CVE-2026-79023, CVE-2026-79024, CVE-2026-79025, CVE-2026-79028, CVE-2026-79030, CVE-2026-79031, CVE-2026-79032, CVE-2026-79033, CVE-2026-79034, CVE-2026-79038, CVE-2026-79042, CVE-2026-79044, CVE-2026-79046, CVE-2026-79049, CVE-2026-79050, CVE-2026-79051, CVE-2026-79053, CVE-2026-79057, CVE-2026-79059, CVE-2026-79064, CVE-2026-79065, CVE-2026-79066, CVE-2026-79067, CVE-2026-79068, CVE-2026-79070, CVE-2026-79071, CVE-2026-79073, CVE-2026-79074, CVE-2026-79075, CVE-2026-79076, CVE-2026-79083, CVE-2026-79084, CVE-2026-79085, CVE-2026-79086, CVE-2026-79087, CVE-2026-79088, CVE-2026-79091, CVE-2026-79094, CVE-2026-79095, CVE-2026-79097, CVE-2026-79099, CVE-2026-79103, CVE-2026-79104, CVE-2026-79106, CVE-2026-79107, CVE-2026-79109, CVE-2026-79110, CVE-2026-79116, CVE-2026-79120, CVE-2026-79122, CVE-2026-79127, CVE-2026-79128, CVE-2026-79129, CVE-2026-79132, CVE-2026-79134, CVE-2026-79136, CVE-2026-79137, CVE-2026-79139, CVE-2026-79140, CVE-2026-79141, CVE-2026-79143, CVE-2026-79144, CVE-2026-79146, CVE-2026-79151, CVE-2026-79154, CVE-2026-79173, CVE-2026-79176, CVE-2026-79178, CVE-2026-79180, CVE-2026-79182, CVE-2026-79185, CVE-2026-79186, CVE-2026-79191, CVE-2026-79192, CVE-2026-79193, CVE-2026-79199, CVE-2026-79201, CVE-2026-79203, CVE-2026-79204, CVE-2026-79205, CVE-2026-79208, CVE-2026-79209, CVE-2026-79210, CVE-2026-79211, CVE-2026-79213, CVE-2026-79214, CVE-2026-79215, CVE-2026-79216, CVE-2026-79217, CVE-2026-79220, CVE-2026-79221, CVE-2026-79222, CVE-2026-79226, CVE-2026-79227, CVE-2026-79228, CVE-2026-79229, CVE-2026-79230, CVE-2026-79231, CVE-2026-79234, CVE-2026-79237, CVE-2026-79238, CVE-2026-79241, CVE-2026-79242, CVE-2026-79245, CVE-2026-79248, CVE-2026-79249, CVE-2026-79250, CVE-2026-79251, CVE-2026-79252, CVE-2026-79255, CVE-2026-79256, CVE-2026-79258, CVE-2026-79259, CVE-2026-79262, CVE-2026-79264, CVE-2026-79265, CVE-2026-79266, CVE-2026-79267, CVE-2026-79269, CVE-2026-79270, CVE-2026-79271, CVE-2026-79272, CVE-2026-79276, CVE-2026-79283, CVE-2026-79285, CVE-2026-79286, CVE-2026-79287, CVE-2026-79291, CVE-2026-79293, CVE-2026-82072, CVE-2026-84323, CVE-2026-84328, CVE-2026-84330, CVE-2026-84332, CVE-2026-84334, CVE-2026-84335, CVE-2026-84347, CVE-2026-84348, CVE-2026-84355, CVE-2026-84358, CVE-2026-85044, CVE-2026-85047

Low (199)

CVE-2026-17898, CVE-2026-17899, CVE-2026-17900, CVE-2026-17901, CVE-2026-17902, CVE-2026-17903, CVE-2026-17904, CVE-2026-17905, CVE-2026-17906, CVE-2026-17907, CVE-2026-17908, CVE-2026-17909, CVE-2026-17910, CVE-2026-17911, CVE-2026-17912, CVE-2026-17913, CVE-2026-17914, CVE-2026-17915, CVE-2026-17916, CVE-2026-17917, CVE-2026-17918, CVE-2026-17919, CVE-2026-17920, CVE-2026-17921, CVE-2026-17922, CVE-2026-17923, CVE-2026-17924, CVE-2026-17925, CVE-2026-17926, CVE-2026-17927, CVE-2026-17928, CVE-2026-17929, CVE-2026-17930, CVE-2026-17931, CVE-2026-17932, CVE-2026-17933, CVE-2026-17934, CVE-2026-17935, CVE-2026-17936, CVE-2026-17937, CVE-2026-17938, CVE-2026-17939, CVE-2026-17940, CVE-2026-17941, CVE-2026-17942, CVE-2026-17943, CVE-2026-17944, CVE-2026-17945, CVE-2026-17946, CVE-2026-17947, CVE-2026-17948, CVE-2026-17949, CVE-2026-17950, CVE-2026-17951, CVE-2026-17952, CVE-2026-17953, CVE-2026-17954, CVE-2026-17955, CVE-2026-17956, CVE-2026-17957, CVE-2026-17958, CVE-2026-17959, CVE-2026-17960, CVE-2026-17961, CVE-2026-17962, CVE-2026-17963, CVE-2026-17964, CVE-2026-17965, CVE-2026-17966, CVE-2026-17967, CVE-2026-17968, CVE-2026-17969, CVE-2026-17970, CVE-2026-17971, CVE-2026-17972, CVE-2026-17973, CVE-2026-17974, CVE-2026-17975, CVE-2026-17976, CVE-2026-17977, CVE-2026-17978, CVE-2026-17979, CVE-2026-17980, CVE-2026-17981, CVE-2026-17982, CVE-2026-17983, CVE-2026-17984, CVE-2026-17985, CVE-2026-17986, CVE-2026-17987, CVE-2026-17988, CVE-2026-17989, CVE-2026-17990, CVE-2026-17991, CVE-2026-17992, CVE-2026-17993, CVE-2026-17994, CVE-2026-17995, CVE-2026-17996, CVE-2026-17997, CVE-2026-17998, CVE-2026-17999, CVE-2026-18000, CVE-2026-18001, CVE-2026-18002, CVE-2026-18003, CVE-2026-18004, CVE-2026-18005, CVE-2026-18006, CVE-2026-18007, CVE-2026-18008, CVE-2026-18009, CVE-2026-18010, CVE-2026-18011, CVE-2026-18012, CVE-2026-18013, CVE-2026-18014, CVE-2026-18015, CVE-2026-18016, CVE-2026-18017, CVE-2026-18018, CVE-2026-18019, CVE-2026-78896, CVE-2026-78897, CVE-2026-78914, CVE-2026-78915, CVE-2026-78946, CVE-2026-78947, CVE-2026-78950, CVE-2026-78956, CVE-2026-78957, CVE-2026-78964, CVE-2026-78968, CVE-2026-78974, CVE-2026-78977, CVE-2026-78979, CVE-2026-78980, CVE-2026-78981, CVE-2026-79000, CVE-2026-79001, CVE-2026-79005, CVE-2026-79009, CVE-2026-79015, CVE-2026-79017, CVE-2026-79018, CVE-2026-79021, CVE-2026-79022, CVE-2026-79040, CVE-2026-79041, CVE-2026-79045, CVE-2026-79055, CVE-2026-79056, CVE-2026-79058, CVE-2026-79060, CVE-2026-79077, CVE-2026-79089, CVE-2026-79090, CVE-2026-79098, CVE-2026-79105, CVE-2026-79108, CVE-2026-79112, CVE-2026-79119, CVE-2026-79123, CVE-2026-79124, CVE-2026-79125, CVE-2026-79126, CVE-2026-79133, CVE-2026-79147, CVE-2026-79148, CVE-2026-79152, CVE-2026-79177, CVE-2026-79179, CVE-2026-79181, CVE-2026-79184, CVE-2026-79190, CVE-2026-79196, CVE-2026-79197, CVE-2026-79206, CVE-2026-79207, CVE-2026-79223, CVE-2026-79225, CVE-2026-79233, CVE-2026-79239, CVE-2026-79243, CVE-2026-79244, CVE-2026-79246, CVE-2026-79253, CVE-2026-79254, CVE-2026-79260, CVE-2026-79261, CVE-2026-79263, CVE-2026-79273, CVE-2026-79284, CVE-2026-79289, CVE-2026-84327, CVE-2026-84329, CVE-2026-84331, CVE-2026-84350, CVE-2026-84356

Node 24.19.0 -> 24.22.0 (bundled in Electron)

No security releases in that range (the next one, 24.22.1, isn't in Electron 44.9.3 yet).

Other updates

No known CVEs: Semantic UI 2.0.8 -> 2.5.0, n-readlines 1.0.3 -> 3.4.1, @types/jquery, GitHub Actions bumps (Node 20 -> 24 action runtime).

@danoli3
danoli3 merged commit 9bfe7db into openframeworks:master Oct 22, 2026
6 checks passed
@danoli3 danoli3 mentioned this pull request Oct 22, 2026
Merged
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@danoli3