CVE-2025-69235
High · 7.5CVSS
7.5
EPSS
0.2%
Published
Dec 30, 2025
CISA due date
—
The record
Whale browser before 4.35.351.12 allows an attacker to bypass the Same-Origin Policy in a sidebar environment.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|