We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
Jan v0.5.14 and before is vulnerable to remote code execution (RCE) when the user clicks on a rendered link in the conversation, due to opening external website in the app and the exposure of electronAPI, with a lack of filtering of URL when calling shell.openExternal().
Reserved 2025-03-11 | Published 2025-05-09 | Updated 2025-05-12 | Assigner mitregist.github.com/Suuuuuzy/b8fa2fa083793c460e3686c182f8c4d1
drive.google.com/...erSjYgPRLWFFXqlXM9tcrjD/view?usp=sharing
Support options
