CVE-2026-52873 Streambert: Global CSP Removal in Wyzie Redeem Window Enables Unconstrained XSS in Electron Renderer

Streambert is a cross-platform Electron Desktop App to stream and download video content. From version 2.5.0 until version 2.6.0, the wyzie-open-redeem IPC handler in index.js creates the partition:wyzie-redeem Electron session and registers an onHeadersReceived hook that removes the...

PT-2026-68211

Name of the Vulnerable Software and Affected Versions Electron versions prior to 40.10.6 Electron versions prior to 41.9.1 Electron versions prior to 42.5.1 Electron versions prior to 43.0.0 Description When a custom protocol handler returns a ProtocolResponse containing a url but lacking a...