Explore

Rule Explorer

Search the public rule index by CVE, GHSA, CWE, language, framework, author, or rule slug. Filter by language, framework, severity, confidence, license, and validation status.

Public rules
2917
Downloads
3.3M
Verified
2917
Authors
2
Search the rule indexUse CVE, GHSA, CWE, language, framework, package, or rule slug.
1 rules matched. Showing 1 loaded rules.
Publish rule
CVE-2025-55305: Electron Missing V8 Snapshot Validatorcve-2025-55305-electron-missing-v8-snapshot-validator

The application defaults its main delegate constructor without registering a V8 context snapshot validator. If ASAR integrity measures rely on a clean JavaScript execution environment, failing to validate the initial V8 snapshot allows attackers with local write access to bypass those measures.

by Provallyupdated 2026-06-12Apache-2.0
1K0 direct1K via packs
downloads
65quality
All matching rules loaded.