WS-2026-0174

Electron before 42.11.16, 43.0.0-alpha.1 through 43.8.0, 44.0.0-alpha.1 through 44.9.0, and 45.0.0-alpha.1 through 45.0.0-beta.5 trust TLS chains that pass through the compromised eMudhra emSign intermediate CAs, in both Chromium networking and Node.js tls/https/fetch. An attacker holding a...