416 matches found
stegcloak
StegCloak The Cloak of Invisibility for your texts StegCloak is a pure JavaScript steganography module designed in functional programming style, to hide secrets inside text by compressing and encrypting the secret before cloaking it with special unicode invisible characters. It can be used to...
CVE-2026-105217
A flaw was found in Cockpit CMS. The application disables Transport Layer Security TLS certificate verification when making background requests to restart web workers. An attacker in a position to intercept network traffic could exploit this flaw by presenting an arbitrary certificate, allowing...
Linux Distros Unpatched Vulnerability : CVE-2026-102676
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 41.10.6, 42.9.2, 43.4.1, and 44.0.0-beta.5, an...
GHSA-9QH4-3JW8-366W Electron: <webview> can enable Node.js integration in Web Workers despite embedder restrictions
Impact A could enable Node.js integration in its Web Workers even when its embedder had Node.js integration disabled, giving guest content more privilege than the embedder allowed. Apps are only affected if they enable the tag and the embedder is unsandboxed. Apps that do not use , or that keep t...
NPM: Electron: <webview> can enable Node.js integration in Web Workers despite embedder restrictions
NPM: Electron: can enable Node.js integration in Web Workers despite embedder restrictions vulnerability discovered by ? in WordPress Npm electron versions 41.10.6...
Electron: <webview> can enable Node.js integration in Web Workers despite embedder restrictions
Impact A could enable Node.js integration in its Web Workers even when its embedder had Node.js integration disabled, giving guest content more privilege than the embedder allowed. Apps are only affected if they enable the tag and the embedder is unsandboxed. Apps that do not use , or that keep t...
CVE-2026-102676
Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 41.10.6, 42.9.2, 43.4.1, and 44.0.0-beta.5, an Electron guest could enable nodeIntegrationInWorker for its Web Workers even when the unsandboxed embedder had Node.js integration...
EUVD-2026-89095
Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 41.10.6, 42.9.2, 43.4.1, and 44.0.0-beta.5, an Electron guest could enable nodeIntegrationInWorker for its Web Workers even when the unsandboxed embedder had Node.js integration...
CVE-2026-102676
The Electron framework is vulnerable in versions prior to 41.10.6 , 42.9.2 , 43.4.1 , and 44.0.0-beta.5 . An untrusted "> guest can enable nodeIntegrationInWorker for its Web Workers, even if the unsandboxed embedder has Node.js integration disabled. This allows the guest content to create a N...
CVE-2026-102676 Electron: <webview> can enable Node.js integration in Web Workers despite embedder restrictions
Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 41.10.6, 42.9.2, 43.4.1, and 44.0.0-beta.5, an Electron guest could enable nodeIntegrationInWorker for its Web Workers even when the unsandboxed embedder had Node.js integration...
CVE-2026-102676 Electron: <webview> can enable Node.js integration in Web Workers despite embedder restrictions
Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 41.10.6, 42.9.2, 43.4.1, and 44.0.0-beta.5, an Electron guest could enable nodeIntegrationInWorker for its Web Workers even when the unsandboxed embedder had Node.js integration...
CVE-2026-102676 Electron: <webview> can enable Node.js integration in Web Workers despite embedder restrictions
Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 41.10.6, 42.9.2, 43.4.1, and 44.0.0-beta.5, an Electron guest could enable nodeIntegrationInWorker for its Web Workers even when the unsandboxed embedder had Node.js integration...
CVE-2026-102676: Improper Privilege Management
Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 41.10.6, 42.9.2, 43.4.1, and 44.0.0-beta.5, an Electron guest could enable nodeIntegrationInWorker for its Web Workers even when the unsandboxed embedder had Node.js integration...
Astra Linux – Vulnerability in Firefox and Thunderbird
When importing resources using Web Workers, error messages would differentiate between application/javascript responses and non-script responses. This could have been exploited to obtain information across origins. This vulnerability affects Firefox 126, Firefox ESR 115.11, and Thunderbird 115.11...
Astra Linux – Vulnerability in Chromium
The use of after-free in Web Workers in Google Chrome before version 107.0.5304.106 allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page. Chromium security severity: High...
Astra Linux – Vulnerability in Firefox and Thunderbird
When importing resources using Web Workers, error messages would distinguish the difference between application/javascript responses and non-script responses. This vulnerability could have been exploited to obtain information across origins. This issue affects Firefox versions earlier than 97,...
DEBIAN-CVE-2026-87466
Incorrect authorization in Workers in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-74328
Incorrect authorization in Workers in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
SUSE CVE-2026-79201
Improper access control in Workers in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
