Repository navigation
ScreenAI v2.0
Pre-release
Pre-release
This release contains known security vulnerabilities:
- CRITICAL: Command injection in screenshot component (GHSA-gjx4-2c7g-fm94)
- HIGH: 17 unpatched Electron CVEs (Electron 29.x)
- Unvalidated
openExternalcalls allowing file/protocol injection from AI-generated content - API keys passed in URL query strings (visible in logs)
- No renderer sandbox or navigation guards
➡️ Please download ScreenAI v2.1.1 — the security-hardened release.