Threats tagged 'ghsa-p2rr-rvmm-c5fp'

A vulnerability in Electron allows sandboxed iframes to launch external protocol handlers without respecting sandbox restrictions. This affects apps rendering untrusted content in sandboxed iframes that grant the openExternal permission by default. The issue is fixed in Electron versions 39.8.8, 40.9.0, 41.2.1, and 42.0.0-beta.3.