https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 18:19:00 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-42700 EUVD-2026-42700 https://cve.radiocsirt.org/vuln/euvd-2026-42700 https://cve.radiocsirt.org/vuln/fkie_cve-2020-15174 <p>In Electron before versions 11.0.0-beta.1, 10.0.1, 9.3.0 or 8.5.1 the `will-navigate` event that apps use to prevent navigations to unexpected destinations as per our security recommendations can be bypassed when a sub-frame performs a top-frame navigation across sites. The issue is patched in versions 11.0.0-beta.1, 10.0.1, 9.3.0 or 8.5.1 As a workaround sandbox all your iframes using the sandbox attribute. This will prevent them creating top-frame navigations and is good practice anyway.</p> <p>In Electron before versions 11.0.0-beta.1, 10.0.1, 9.3.0 or 8.5.1 the `will-navigate` event that apps use to prevent navigations to unexpected destinations as per our security recommendations can be bypassed when a sub-frame performs a top-frame navigation across sites. The issue is patched in versions 11.0.0-beta.1, 10.0.1, 9.3.0 or 8.5.1 As a workaround sandbox all your iframes using the sandbox attribute. This will prevent them creating top-frame navigations and is good practice anyway.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-15174 https://cve.radiocsirt.org/vuln/ghsa-2q4g-w47c-4674 <p><strong>Affected:</strong> npm: electron</p> <p>### Impact The `will-navigate` event that apps use to prevent navigations to unexpected destinations [as per our security recommendations](https://www.electronjs.org/docs/tutorial/security) can be bypassed when a sub-frame performs a top-frame navigation across sites.</p> <p>### Patches</p> <p>* `11.0.0-beta.1` * `10.0.1` * `9.3.0` * `8.5.1`</p> <p>### Workarounds Sandbox all your iframes using the [`sandbox` attribute](https://developer.mozilla.org/en-US/docs/Web/HTML/Element/iframe#attr-sandbox). This will prevent them creating top-frame navigations and is good practice anyway.</p> <p>### For more information If you have any questions or comments about this advisory:</p> <p>* Email us at security@electronjs.org</p> <p><strong>Affected:</strong> npm: electron</p> <p>### Impact The `will-navigate` event that apps use to prevent navigations to unexpected destinations [as per our security recommendations](https://www.electronjs.org/docs/tutorial/security) can be bypassed when a sub-frame performs a top-frame navigation across sites.</p> <p>### Patches</p> <p>* `11.0.0-beta.1` * `10.0.1` * `9.3.0` * `8.5.1`</p> <p>### Workarounds Sandbox all your iframes using the [`sandbox` attribute](https://developer.mozilla.org/en-US/docs/Web/HTML/Element/iframe#attr-sandbox). This will prevent them creating top-frame navigations and is good practice anyway.</p> <p>### For more information If you have any questions or comments about this advisory:</p> <p>* Email us at security@electronjs.org</p> https://cve.radiocsirt.org/vuln/ghsa-2q4g-w47c-4674 https://cve.radiocsirt.org/vuln/gsd-2020-15174 gsd-2020-15174 https://cve.radiocsirt.org/vuln/gsd-2020-15174