erisu commented on code in PR #1506: URL: https://github.com/apache/cordova-docs/pull/1506#discussion_r3371117380
########## www/_posts/2026-06-07-inappbrowser-release-6.0.1.md: ########## @@ -0,0 +1,51 @@ +--- +layout: post +author: + name: Niklas Merz + url: https://w3c.social/@niklasmerz +title: "Cordova Plugin InAppBrowser 6.0.1 With Fix For CVE-2026-47430 Released!" +categories: announcements +tags: news releases plugins +--- + +We are happy to announce that we have just released an update to `cordova-plugin-inappbrowser`! + +* [[email protected]](https://www.npmjs.com/package/cordova-plugin-inappbrowser) + +## Release Highlights + +This is a small patch release that addresses the recently published vulnerability **CVE-2026-47430: Cordova Plugin InAppBrowser: iOS: Arbitrary Cordova callback IDs can be dispatched without validation from InAppBrowser WebViews**. Full details: Review Comment: ```suggestion This is a small patch release that addresses the recently published vulnerability **[CVE-2026-47430](https://www.cve.org/CVERecord?id=CVE-2026-47430): Cordova Plugin InAppBrowser: iOS: Arbitrary Cordova callback IDs can be dispatched without validation from InAppBrowser WebViews**. Full details: ``` -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
