eDEX-UI is a fullscreen, cross-platform terminal emulator and system monitor that looks and feels like a sci-fi computer interface.

This is a community-driven fork of the original eDEX-UI, which was archived in October 2021. This fork aims to revive the project, apply security patches, and continue its development.

Note

Check out my android port of edex here

🛡️ Security Fix Information

• CVE: Not assigned (discovered post-archive)
• Severity: Critical
• Impact: Remote Command Execution via WebSocket hijacking

Vulnerability Details

The original eDEX-UI contained a security vulnerability where malicious websites could connect to the internal terminal control WebSocket and execute arbitrary shell commands on the user's system.

The Fix

This fork implements proper origin validation for WebSocket connections:

• Only accepts connections from the local Electron application (file:// protocol)
• Rejects all web-based connection attempts (http://, https://)
• Logs rejected connection attempts for security monitoring
• Fixed in: src/classes/terminal.class.js

Recent Updates (October 2025)

This fork has been updated with modern versions of all dependencies:

• Electron: Upgraded from v12.1.0 to v37.6.0 (latest stable)
• Node.js: Now requires v20.x LTS (previously v16)
• Dependencies: All dependencies updated to latest stable versions
• Security: All known vulnerabilities patched (0 vulnerabilities)
• xterm: Migrated to modern @xterm/* packages (v5.5.0)
• Build system: Modernized to work with current Node.js and Python versions

---

⚠️ Important Notes

This is a fork of the original eDEX-UI, which is no longer actively maintained. While this fork addresses a critical security vulnerability, it should be considered a work in progress. Community contributions are welcome to help revive and improve the project. Please use this software "as-is" and take appropriate security measures when running any terminal emulator with network capabilities.

Installation

Pre-built Binaries

⚠️ Note: Pre-built binaries from the original repository contain the vulnerability. Only use builds from this fork or build from source.

Head over to releases and download the correct prebuild

Building from Source (Recommended for Security)

This fork has been updated with modern versions of all dependencies. Following these steps will ensure you have a working, patched version with up-to-date components.

1. Environment Setup (Linux/Ubuntu)

The build process requires modern versions of Node.js and Python.

• Install nvm (Node Version Manager): This is the best way to manage Node.js versions.

  curl -o- https://raw.githubusercontent.com/nvm-sh/nvm/v0.39.7/install.sh | bash
  source ~/.bashrc
  
  

• Install and Use Node.js v20 LTS: This project now requires Node.js v20 LTS for the latest Electron version.

  nvm install 20
  nvm use 20
  
  

• Install Python 3: The build scripts require Python 3 (3.8 or later recommended).

  sudo apt update
  sudo apt install -y python3 python3-pip
  
  

• Install Build Tools:

  sudo apt install -y build-essential git
  
  

2. Clone and Build the Application

Now, with the correct environment set up, you can clone and build the project.

• Clone repository:

  git clone https://github.com/theelderemo/eDEX-UI-security-patched.git
  cd eDEX-UI-security-patched
  
  

• Install dependencies:

  npm run install-linux
  
  

  This will install all dependencies and rebuild native modules (like node-pty) for the current Electron version.

• Build the binary:

  npm run build-linux
  
  

After the build completes, you will find the installable .AppImage and .deb files in the dist/ directory.

Troubleshooting

If you encounter issues with native modules not building:

• Ensure you have build-essential installed: sudo apt install build-essential
• Make sure Python 3 is available: which python3
• Try rebuilding manually: cd src && npx @electron/rebuild

Contributing

Community contributions are highly encouraged! If you'd like to help, please feel free to:

• Report bugs: Open an issue to report any bugs you find.
• Suggest features: Open an issue to suggest new features or enhancements.
• Submit pull requests: If you've made a change you'd like to contribute, please submit a pull request.

Original Credits

eDEX-UI was created by GitSquared (Gabriel Saillard).

Sound effects by IceWolf.

Globe visualization by Rob "Arscan" Scanlon.

Security Fork Maintainer

This security-patched fork is maintained by theelderemo.

If you discover any additional security issues, please report them by opening an issue in this repository.

License

Licensed under the GPLv3.0, the same as the original project.