Threats tagged 'ghsa-m55f-7gqj-fr98'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	6.6	EPSS 0.3%	CVE-2026-70602Electron · Extension tab APIs operate across session boundaries Medium6.6EPSS 0.3%2026-08-05GCVE DatabaseCVE-2026-70602 A vulnerability in Electron's extension tab and scripting APIs allowed extensions loaded in one session to access and manipulate windows in other sessions. This affects apps that load Chrome extensions via session.loadExtension and rely on session separation for isolation. The issue is fixed in Electron versions 39.8.8 and later. EPSS 0.3%Vulnerability CWE-284 #ghsa-m55f-7gqj-fr98 #npm	GCVE Database	2026-08-05

Page 1 of 1