Electron Sandboxed iframe bypasses allow-popups restriction via OpenURL (CVE-2025-70608)
Security Advisory
GHSA-9f4c-93c8-jc8g
High
Electron
Affected:
- electron >= 42.0.0-alpha.1, < 42.0.1
- electron >= 40.0.0-alpha.1, < 41.10.3
- electron < 39.8.10
Fixed in:
- 42.0.1
- 41.10.3
- 39.8.10
Referenced CVEs:
CVE-2026-70608 · 7.2
文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive
This content was auto-fetched from github.com, cleaned by our LLM pipeline, and translated to English. View original.