Issues

• Dependabot Alert 199: Electron: <webview> can enable Node.js integration in Web Workers despite embedder restrictions

  dependabot
  sparebank1utvikling/minibank-xtreme#70 · Filter by author team-github-alerts opened on Oct 1, 2026

• Dependabot Alert 202: Electron drops inherited HTML sandbox restrictions for popups opened through OpenURLFromTab

  dependabot
  sparebank1utvikling/minibank-xtreme#68 · Filter by author team-github-alerts opened on Oct 1, 2026

• Dependabot Alert 200: Electron: Windows opened from a sandboxed top-level document do not inherit its sandbox restrictions

  dependabot
  sparebank1utvikling/minibank-xtreme#69 · Filter by author team-github-alerts opened on Oct 1, 2026

• Dependabot Alert 203: Electron: File and HTTP protocol handlers allow cross-origin reads without corsEnabled

  dependabot
  sparebank1utvikling/minibank-xtreme#67 · Filter by author team-github-alerts opened on Oct 1, 2026

• Dependabot Alert 195: Electron: Windows opened from a sandboxed top-level document do not inherit its sandbox restrictions

  dependabot
  sparebank1utvikling/minibank-xtreme#65 · Filter by author team-github-alerts opened on Sep 30, 2026

• Dependabot Alert 194: Electron: <webview> can enable Node.js integration in Web Workers despite embedder restrictions

  dependabot
  sparebank1utvikling/minibank-xtreme#66 · Filter by author team-github-alerts opened on Sep 30, 2026

• Dependabot Alert 196: Electron drops inherited HTML sandbox restrictions for popups opened through OpenURLFromTab

  dependabot
  sparebank1utvikling/minibank-xtreme#64 · Filter by author team-github-alerts opened on Sep 30, 2026

• Dependabot Alert 198: Electron: File and HTTP protocol handlers allow cross-origin reads without corsEnabled

  dependabot
  sparebank1utvikling/minibank-xtreme#63 · Filter by author team-github-alerts opened on Sep 30, 2026

• Dependabot Alert 148: Electron: Context isolation bypass via Function.prototype.bind hijack

  dependabot
  sparebank1utvikling/minibank-xtreme#62 · Filter by author team-github-alerts opened on Aug 8, 2026

• Dependabot Alert 151: Electron: Custom protocol with supportFetchAPI but not corsEnabled allows cross-origin reads

  dependabot
  sparebank1utvikling/minibank-xtreme#61 · Filter by author team-github-alerts opened on Aug 8, 2026

• Dependabot Alert 158: Electron: Sandboxed iframe can bypass the allow-popups restriction via the OpenURL navigation path

  dependabot
  sparebank1utvikling/minibank-xtreme#60 · Filter by author team-github-alerts opened on Aug 8, 2026

• Dependabot Alert 169: Electron: Sandboxed iframe can bypass the allow-popups restriction via the OpenURL navigation path

  dependabot
  sparebank1utvikling/minibank-xtreme#57 · Filter by author team-github-alerts opened on Aug 8, 2026

• Dependabot Alert 164: Electron: Custom protocol with supportFetchAPI but not corsEnabled allows cross-origin reads

  dependabot
  sparebank1utvikling/minibank-xtreme#58 · Filter by author team-github-alerts opened on Aug 8, 2026

• Dependabot Alert 159: Electron: Context isolation bypass via Function.prototype.bind hijack

  dependabot
  sparebank1utvikling/minibank-xtreme#59 · Filter by author team-github-alerts opened on Aug 8, 2026

• Dependabot Alert 119: vite: bypass on Windows alternate paths

  dependabot
  sparebank1utvikling/minibank-xtreme#56 · Filter by author team-github-alerts opened on Jun 25, 2026

• Dependabot Alert 117: vite: bypass on Windows alternate paths

  dependabot
  sparebank1utvikling/minibank-xtreme#55 · Filter by author team-github-alerts opened on Jun 24, 2026
  1

• Dependabot Alert 111: launch-editor vulnerable to command injection via the crafted request on Windows

  dependabot
  sparebank1utvikling/minibank-xtreme#53 · Filter by author team-github-alerts opened on Jun 5, 2026

• Dependabot Alert 110: launch-editor vulnerable to command injection via the crafted request on Windows

  dependabot
  sparebank1utvikling/minibank-xtreme#54 · Filter by author team-github-alerts opened on Jun 5, 2026

• Dependabot Alert 75: Electron: Renderer command-line switch injection via undocumented commandLineSwitches webPreference

  dependabot
  sparebank1utvikling/minibank-xtreme#51 · Filter by author team-github-alerts opened on Apr 3, 2026

• Dependabot Alert 74: Electron: Use-after-free in PowerMonitor on Windows and macOS

  dependabot
  sparebank1utvikling/minibank-xtreme#52 · Filter by author team-github-alerts opened on Apr 3, 2026

• Dependabot Alert 80: Electron: Use-after-free in offscreen child window paint callback

  dependabot
  sparebank1utvikling/minibank-xtreme#49 · Filter by author team-github-alerts opened on Apr 3, 2026

• Dependabot Alert 77: Electron: Use-after-free in WebContents fullscreen, pointer-lock, and keyboard-lock permission callbacks

  dependabot
  sparebank1utvikling/minibank-xtreme#50 · Filter by author team-github-alerts opened on Apr 3, 2026

• Dependabot Alert 88: Electron: Use-after-free in PowerMonitor on Windows and macOS

  dependabot
  sparebank1utvikling/minibank-xtreme#48 · Filter by author team-github-alerts opened on Apr 3, 2026

• Dependabot Alert 90: Electron: Use-after-free in WebContents fullscreen, pointer-lock, and keyboard-lock permission callbacks

  dependabot
  sparebank1utvikling/minibank-xtreme#46 · Filter by author team-github-alerts opened on Apr 3, 2026

• Dependabot Alert 89: Electron: Renderer command-line switch injection via undocumented commandLineSwitches webPreference

  dependabot
  sparebank1utvikling/minibank-xtreme#47 · Filter by author team-github-alerts opened on Apr 3, 2026