Unity has fixes ready to go, and Valve has released an updated version of Steam, too.
Unity’s latest update drops the ‘preview’ label for WebGL and makes the technology an officially-supported build target. Since Unity 5.0, WebGL has been an unsupported preview technology. As of 5.3, ...
A vulnerable Unity Runtime code could allow attackers to to execute commands and steal confidential information from devices running the app.