From 89ade1cac6fd1493abb5cf1e54153210dfec97fb Mon Sep 17 00:00:00 2001 From: Sergey Kazantsev Date: Fri, 12 Dec 2025 13:52:28 +0100 Subject: [PATCH] Remove Chromium warning --- README.md | 18 ------------------ 1 file changed, 18 deletions(-) diff --git a/README.md b/README.md index a19d8b3..d539e79 100644 --- a/README.md +++ b/README.md @@ -2,24 +2,6 @@ This is the repo for `code-editor`. -## ⚠️ Security Advisory - CVE-2025-13223 and CVE-2025-13224 - -**Affected Components:** Chromium versions prior to 142.0.7444.175/.176 (Windows), 142.0.7444.176 (Mac), and 142.0.7444.175 (Linux) - -**Impact Assessment:** -- Code Editor depends on Code OSS → Electron → Chromium -- Current Electron [v39.2.2](https://github.com/electron/electron/releases/tag/v39.2.2) includes vulnerable Chromium 142.0.7444.162 -- **Code Editor web-server builds are NOT affected** - we distribute web-server artifacts that do not include Electron dependencies -- Standalone desktop builds may be affected if built locally - -**Mitigation Status:** -- Fix pending Electron's Chromium update -- Web-server distribution remains secure as it excludes Electron components -- Users building standalone desktop versions should monitor for Electron updates - -**Technical Details:** -Code OSS uses Electron only for [desktop builds](https://github.com/microsoft/vscode/blob/main/build/gulpfile.vscode.mjs#L71-L75), not for [web-server builds](https://github.com/microsoft/vscode/blob/main/build/gulpfile.reh.mjs#L92-L97). Our distributed artifacts contain no Electron references. - ### Repository structure The repository structure is the following: