Electron (>= 42.0.0-Alpha.1, < 42.9.2)

A vulnerability in Electron prevents popups opened from sandboxed iframes from inheriting security restrictions, allowing potentially malicious content to access the embedding application's full origin.