Electron: File and HTTP protocol handlers allow cross-origin reads without corsEnabled
1. Executive summary Electron has shipped a follow-up fix for CVE-2026-70604, a CORS enforcement gap in custom protocol schemes registered with supportFetchAPI: true
29 Sep 2026 · 7 min read
read →