漏洞公告

rclone: Incomplete path validation allows backend root escape in serve restic

rclone local `--metadata` applies attacker-controlled mode/uid - setuid binary planted from an untrusted remote

rclone: Verbose Stack Trace Disclosure in RC API Error Responses

Electron: Sandboxed iframes can launch external protocol handlers

Electron: DevTools embedder handler executes arbitrary files via shell open

Electron: contextBridge object copy honors prototype setters

Electron: DevTools JavaScript Injection via Unsanitized Dock State Parameter

Electron: Sandboxed iframe can bypass the allow-popups restriction via the OpenURL navigation path

Electron: window.open features string controls some window options considered privileged

Electron: ProtocolResponse.url reuses the default session cache instead of the registering session

Electron: HTTP redirect followed into local file loader

Electron: Custom protocol with supportFetchAPI but not corsEnabled allows cross-origin reads

Electron: Extension tab APIs operate across session boundaries

Electron: shell.openPath path validation bypass via embedded null byte

Electron: Context isolation bypass via Function.prototype.bind hijack

Electron: Cross-origin iframe can position native autofill popup

Electron: Permission Check Handler Receives Main Frame Origin Instead of Requesting Iframe Origin

Statamic CMS exposes two-factor recovery codes through dynamic Antlers rendering

Electron: Off-screen rendering trusts GPU-supplied geometry over shared-memory size

Electron: Parent process code-sign check is spoofable

Ghost Content API filter bypass reveals private fields

Ghost: Cross-Site Scripting in Feature Image Captions

Ghost: Server-Side Request Forgery Mitigation Issue