{"action":"Upgrade electron to 41.10.4 or later.","affected":[{"fixed":"41.10.4","introduced":"0"},{"fixed":"42.5.2","introduced":"42.0.0-alpha.1"},{"fixed":"43.0.0","introduced":"43.0.0-alpha.1"}],"component":"electron","cve_ids":["CVE-2026-102673"],"ecosystem":"npm","epss":0.00132,"exploited":false,"fixed_versions":["41.10.4","42.5.2","43.0.0"],"ghsa_id":"GHSA-hq2x-r82h-9wj4","id":"tcs_01M5KFVSAV59ZHBE1BMCED9KXM","modified_at":"2026-09-29T18:15:04.710097878Z","published_at":"2026-09-29T18:05:34Z","references":["https://osv.dev/vulnerability/GHSA-hq2x-r82h-9wj4","https://github.com/electron/electron/security/advisories/GHSA-hq2x-r82h-9wj4","https://github.com/electron/electron/pull/52133","https://github.com/electron/electron/commit/7ea14d5f55ecb11a30447701ddca16b3feee0bba","https://github.com/electron/electron/commit/e26b2640e7795c42bfb111b76009cbb4327c9a69","https://github.com/electron/electron/commit/ebe1165ee2b05c203c26dd2244ef1c5b9b1c04da","https://github.com/electron/electron","https://github.com/electron/electron/releases/tag/v41.10.4","https://github.com/electron/electron/releases/tag/v42.5.2","https://github.com/electron/electron/releases/tag/v43.0.0"],"severity":{"label":"high","score":8.2},"sources":[{"source":"osv","source_id":"GHSA-hq2x-r82h-9wj4","url":"https://osv.dev/vulnerability/GHSA-hq2x-r82h-9wj4"}],"summary":"Electron drops inherited HTML sandbox restrictions for popups opened through OpenURLFromTab"}