Chromium Remote Code Execution

Overview

Affected versions of ElectronJS are susceptible to a remote code execution vulnerability that occurs when an affected application access remote content, even if the sandbox option is enabled.

Recommendation

Update to electron version 1.7.8 or later.

References

• Electron Blog - Chromium RCE Vulnerability
• GitHub Advisory