Saturday, May 12, 2018

Better stop building web apps for the desktop!

CVE-2018-1000136 - #Electron nodeIntegration Bypass

Some popular applications such as Slack, Discord, Signal, Atom, Visual Studio Code, and Github Desktop are all built using the Electron framework.