{"action":"created","issue":{"url":"https://api.github.com/repos/brave/browser-laptop/issues/840","repository_url":"https://api.github.com/repos/brave/browser-laptop","labels_url":"https://api.github.com/repos/brave/browser-laptop/issues/840/labels{/name}","comments_url":"https://api.github.com/repos/brave/browser-laptop/issues/840/comments","events_url":"https://api.github.com/repos/brave/browser-laptop/issues/840/events","html_url":"https://github.com/brave/browser-laptop/issues/840","id":135011306,"number":840,"title":"Brave is insecure by using an outdated version of Chromium","user":{"login":"jsnar","id":17347358,"avatar_url":"https://avatars.githubusercontent.com/u/17347358?v=3","gravatar_id":"","url":"https://api.github.com/users/jsnar","html_url":"https://github.com/jsnar","followers_url":"https://api.github.com/users/jsnar/followers","following_url":"https://api.github.com/users/jsnar/following{/other_user}","gists_url":"https://api.github.com/users/jsnar/gists{/gist_id}","starred_url":"https://api.github.com/users/jsnar/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jsnar/subscriptions","organizations_url":"https://api.github.com/users/jsnar/orgs","repos_url":"https://api.github.com/users/jsnar/repos","events_url":"https://api.github.com/users/jsnar/events{/privacy}","received_events_url":"https://api.github.com/users/jsnar/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/brave/browser-laptop/labels/security","name":"security","color":"eb6420"},{"url":"https://api.github.com/repos/brave/browser-laptop/labels/upstream","name":"upstream","color":"bfdadc"}],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":9,"created_at":"2016-02-20T00:36:19Z","updated_at":"2016-02-20T23:48:30Z","closed_at":null,"body":"Brave is based on Electron, which is based on an outdated version of Chromium 47 and has quite a few security holes unfixed. The security holes were published in http://googlechromereleases.blogspot.com/search/label/Stable%20updates\r\n\r\nSearch for all the security bugs fixed by Chromium 48. Some of them are marked as high or even critical."},"comment":{"url":"https://api.github.com/repos/brave/browser-laptop/issues/comments/186704182","html_url":"https://github.com/brave/browser-laptop/issues/840#issuecomment-186704182","issue_url":"https://api.github.com/repos/brave/browser-laptop/issues/840","id":186704182,"user":{"login":"SJ-Diamond","id":1733238,"avatar_url":"https://avatars.githubusercontent.com/u/1733238?v=3","gravatar_id":"","url":"https://api.github.com/users/SJ-Diamond","html_url":"https://github.com/SJ-Diamond","followers_url":"https://api.github.com/users/SJ-Diamond/followers","following_url":"https://api.github.com/users/SJ-Diamond/following{/other_user}","gists_url":"https://api.github.com/users/SJ-Diamond/gists{/gist_id}","starred_url":"https://api.github.com/users/SJ-Diamond/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/SJ-Diamond/subscriptions","organizations_url":"https://api.github.com/users/SJ-Diamond/orgs","repos_url":"https://api.github.com/users/SJ-Diamond/repos","events_url":"https://api.github.com/users/SJ-Diamond/events{/privacy}","received_events_url":"https://api.github.com/users/SJ-Diamond/received_events","type":"User","site_admin":false},"created_at":"2016-02-20T23:48:30Z","updated_at":"2016-02-20T23:48:30Z","body":"Depends for sure how fast Brave team has access to the new code, how fast they are able to implement it into their own product.\r\n\r\nAs Brave is no simple Chromium rebrand a delay will be always existing, as long as it is one or 2 versions behind Chromium i see really no danger. That is also the way most other advanced Chromium forks like Vivaldi seem to handle it, and it works good enough for them without putting the user in grave danger."}}