You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: README.md
-18Lines changed: 0 additions & 18 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -2,24 +2,6 @@
2
2
3
3
This is the repo for `code-editor`.
4
4
5
-
## ⚠️ Security Advisory - CVE-2025-13223 and CVE-2025-13224
6
-
7
-
**Affected Components:** Chromium versions prior to 142.0.7444.175/.176 (Windows), 142.0.7444.176 (Mac), and 142.0.7444.175 (Linux)
8
-
9
-
**Impact Assessment:**
10
-
- Code Editor depends on Code OSS → Electron → Chromium
11
-
- Current Electron [v39.2.2](https://github.com/electron/electron/releases/tag/v39.2.2) includes vulnerable Chromium 142.0.7444.162
12
-
-**Code Editor web-server builds are NOT affected** - we distribute web-server artifacts that do not include Electron dependencies
13
-
- Standalone desktop builds may be affected if built locally
14
-
15
-
**Mitigation Status:**
16
-
- Fix pending Electron's Chromium update
17
-
- Web-server distribution remains secure as it excludes Electron components
18
-
- Users building standalone desktop versions should monitor for Electron updates
19
-
20
-
**Technical Details:**
21
-
Code OSS uses Electron only for [desktop builds](https://github.com/microsoft/vscode/blob/main/build/gulpfile.vscode.mjs#L71-L75), not for [web-server builds](https://github.com/microsoft/vscode/blob/main/build/gulpfile.reh.mjs#L92-L97). Our distributed artifacts contain no Electron references.
0 commit comments