DesktopEditors
DesktopEditors copied to clipboard
Outdated and vulnerable v8 is used
This issue is unique.
- [X] I have used the search tool and did not find an issue describing my idea.
Your idea.
The javascript engine v8, version 8.9(used in https://github.com/ONLYOFFICE/build_tools/blob/master/scripts/core_common/modules/v8_89.py) is very outdated and vulnerable.
It should be updated to a recent version or have security patches backported.
For reference, qt5-webengine uses chromium 87 and v8 8.7 with some added security patches. The commits are available here: https://github.com/qt/qtwebengine-chromium/commits/87-based/