Vulnerable Electron EOL version used

[StirlingGoetz]

Thanks T3 Code developers for such needed software.

Are you aware that T3 Code (version 0.0.36 as of this writing) ships with a vulnerable version of Electron that is end of life?

Electron 41.5.0 falls within two recent advisory ranges. T3’s code appears to mitigate their documented exploit conditions—its protocol handler does not use the vulnerable ProtocolResponse.url form, and it explicitly denies new windows—but running an EOL browser runtime remains a material residual risk. CVE-2026-70606, CVE-2026-70608

Hopefully, you have a few tokens you can use to uplift to a non-vulnerable version. Thanks!

[juliusmarminge]

Addressed on main in #8626: the desktop app now uses Electron 43.4.1 instead of 41.5.0. Closing this upgrade request.