Skip to content

Security concern: Outdated webview #377

Description

@LordGrimmauld

This project transitively depends on webkit2gtk (this is finefine) via webview and webview-sys. Both of those projects didn't get any release in the past four years, with very few (single digits!) commits until 2023, and none since. The outdated webview bindings used here are too old to be compatible with maintained webkit2gtk versions.

This means this project also depends on libsoup 2.x versions, which are vulnerable and unmaintained. Please reconsider your webview dependency and maybe move to something actually maintained.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions