CVE-2026-102673

High

Advisory

Published 29 Sept 2026In the index since 30 Sept 2026

Electron drops inherited HTML sandbox restrictions for popups opened through OpenURLFromTab

Carried by container images the latest versions of 2 of 18,104 indexed charts deploy, on 2 images.

Affected package	Affected versions	Fixed in	Images
electronnpm	3.0.7, 11.3.0	41.10.4	2

2 by stars

Chart

Latest

Affected images

Radar Score

magic-mirrorgeek-cookbook

1 of the 1 container images this version deploys carry CVE-2026-102673.

Container image	Digest	Package	Fixed in
bastilimbach/docker-magicmirror :v2.15.0	41b0835ab31e	electron@11.3.0	41.10.4

5,715

1 of the 1 container images this version deploys carry CVE-2026-102673.

Container image	Digest	Package	Fixed in
gristlabs/grist :0.7.9	6e71b1914a7e	electron@3.0.7	41.10.4

5,746

2 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
bastilimbach/docker-magicmirror :v2.15.0	41b0835ab31e	electron@11.3.0	41.10.4	1
gristlabs/grist :0.7.9	6e71b1914a7e	electron@3.0.7	41.10.4	1