Threats tagged 'ghsa-f2r8-jv7c-xqmp'

A vulnerability in Electron's DevTools allows the 'reveal in file manager' action to execute arbitrary files instead of just revealing them. This can be exploited if an attacker can run scripts inside the DevTools frontend, such as via a malicious DevTools extension. Only applications that open DevTools on windows displaying untrusted content or load untrusted DevTools extensions are affected. Fixed versions are 39.8.9 and later.