[Git][security-tracker-team/security-tracker][master] automatic update
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Sat Oct 31 07:19:59 GMT 2026
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
e0d2e99d by security tracker role at 2026-10-31T07:13:27+00:00
automatic update
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,3 +1,335 @@
+CVE-2026-95673
+ REJECTED
+CVE-2026-94361 (The Payable Payment Gateway for WooCommerce WordPress plugin before 1. ...)
+ TODO: check
+CVE-2026-92294 (The Spectra Gutenberg Blocks \u2013 Website Builder for the Block Edit ...)
+ TODO: check
+CVE-2026-90960 (The Seraphinite Accelerator plugin for WordPress is vulnerable to Sens ...)
+ TODO: check
+CVE-2026-89270 (The Popup Builder \u2013 Create highly converting, mobile friendly mar ...)
+ TODO: check
+CVE-2026-88942 (The Product Filter for WooCommerce by WBW plugin for WordPress is vuln ...)
+ TODO: check
+CVE-2026-82214 (The Quick Event Manager WordPress plugin before 9.19 does not verify t ...)
+ TODO: check
+CVE-2026-7005 (WIT SynApps Runtime through 1.4.11 contains a browser-mediated cross-o ...)
+ TODO: check
+CVE-2026-78403 (Stack-based buffer overflow and missing authorization vulnerability in ...)
+ TODO: check
+CVE-2026-78402 (Stack-based buffer overflow and out-of-bounds write vulnerability in T ...)
+ TODO: check
+CVE-2026-77152 (Improper Authorization vulnerability in Drupal Field Collection for Dr ...)
+ TODO: check
+CVE-2026-63414 (Shopify App is a Rails engine for building Shopify applications. From ...)
+ TODO: check
+CVE-2026-63410 (secp256k1-native is a native C secp256k1 implementation for Ruby. In a ...)
+ TODO: check
+CVE-2026-63402 (i18next is an internationalization framework for JavaScript. Prior to ...)
+ TODO: check
+CVE-2026-63401 (Coop is an open source review and moderation tool from ROOST. Prior to ...)
+ TODO: check
+CVE-2026-63400 (Coop is an open source review and moderation tool from ROOST. Prior to ...)
+ TODO: check
+CVE-2026-63399 (Coop is an open source review and moderation tool from ROOST. Prior to ...)
+ TODO: check
+CVE-2026-63398 (Coop is an open source review and moderation tool from ROOST. Prior to ...)
+ TODO: check
+CVE-2026-63396 (Coop is an open source review and moderation tool from ROOST. Prior to ...)
+ TODO: check
+CVE-2026-63393 (OpenSearch SQL supports querying OpenSearch data using SQL and Piped P ...)
+ TODO: check
+CVE-2026-63378 (TAKO AI Agent for Okta is a local-first AI agent that helps Okta admin ...)
+ TODO: check
+CVE-2026-63377 (TAKO AI Agent for Okta is a local-first AI agent that helps Okta admin ...)
+ TODO: check
+CVE-2026-63346 (Refitter is a tool for generating a C# REST API client using the Refit ...)
+ TODO: check
+CVE-2026-63345 (Refitter is a tool for generating a C# REST API client using the Refit ...)
+ TODO: check
+CVE-2026-63344 (Refitter is a tool for generating a C# REST API client using the Refit ...)
+ TODO: check
+CVE-2026-63341 (Aedes is an MQTT broker that can run on any stream server. Prior to 1. ...)
+ TODO: check
+CVE-2026-63339 (IXP Manager is a full-stack web application for managing Internet Exch ...)
+ TODO: check
+CVE-2026-63338 (IXP Manager is a full-stack web application for managing Internet Exch ...)
+ TODO: check
+CVE-2026-63224 (OpenRemote is an open-source internet-of-things platform. Prior to 1.2 ...)
+ TODO: check
+CVE-2026-63201 (Netopeer2 is a server for implementing network configuration managemen ...)
+ TODO: check
+CVE-2026-63184 (Refitter is a tool for generating a C# REST API client using the Refit ...)
+ TODO: check
+CVE-2026-63182 (LightSAML implements SAML 2.0 data model classes, XML serialization an ...)
+ TODO: check
+CVE-2026-63121 (Kubewarden policies is a collection of WebAssembly policies for securi ...)
+ TODO: check
+CVE-2026-63115 (ActivityPub is a multi-tenant ActivityPub server for Ghost, built with ...)
+ TODO: check
+CVE-2026-62991 (Shopper is a Headless e-commerce Admin Panel. Prior to 2.10.1, the cus ...)
+ TODO: check
+CVE-2026-62990 (Shopper is a Headless e-commerce Admin Panel. In versions from 2.0.0 p ...)
+ TODO: check
+CVE-2026-62989 (Shopper is a Headless e-commerce Admin Panel. Prior to 2.10.0, the Var ...)
+ TODO: check
+CVE-2026-62979 (jack lets users share media libraries through their Radarr/Sonarr stac ...)
+ TODO: check
+CVE-2026-62968 (Dream Displays provides in-game screens for streaming videos in Minecr ...)
+ TODO: check
+CVE-2026-62967 (ZTNET is a ZeroTier web UI for private controllers with multiuser and ...)
+ TODO: check
+CVE-2026-62966 (ESPAsyncWebServer is an asynchronous HTTP and WebSocket server library ...)
+ TODO: check
+CVE-2026-62965 (SABnzbd is an open source automated Usenet download tool. Prior to 5.1 ...)
+ TODO: check
+CVE-2026-62958 (libriscv is a RISC-V sandbox and emulator. Prior to 1.18, a crafted EL ...)
+ TODO: check
+CVE-2026-62864 (Ring is a Clojure web applications library inspired by Python's WSGI a ...)
+ TODO: check
+CVE-2026-62863 (MoLing is a computer-use and browser-use based MCP server. Prior to 0. ...)
+ TODO: check
+CVE-2026-62860 (Picsou is a self-hosted personal finance dashboard. In the affected lo ...)
+ TODO: check
+CVE-2026-62853 (ThingLinks is an enterprise IoT platform. Prior to 1.4.0, the `/groovy ...)
+ TODO: check
+CVE-2026-62849 (ThingLinks is an enterprise IoT platform. Prior to 1.4.0, an unauthent ...)
+ TODO: check
+CVE-2026-62848 (Metalama is a Roslyn-based open-source patterns and architecture toolk ...)
+ TODO: check
+CVE-2026-62847 (Metalama is a Roslyn-based open-source patterns and architecture toolk ...)
+ TODO: check
+CVE-2026-62347 (Element Call is a native Matrix video conferencing application. From 0 ...)
+ TODO: check
+CVE-2026-62337 (SNARK Verifier is a generic (S)NARK verifier. Prior to 0.2.5, the Halo ...)
+ TODO: check
+CVE-2026-62335 (OpenVM is a performant and modular zkVM framework built for customizat ...)
+ TODO: check
+CVE-2026-62334 (OpenVM is a performant and modular zkVM framework built for customizat ...)
+ TODO: check
+CVE-2026-62333 (OpenVM is a performant and modular zkVM framework built for customizat ...)
+ TODO: check
+CVE-2026-62331 (praktor is a multi-agent Claude Code orchestrator with Telegram input ...)
+ TODO: check
+CVE-2026-62302 (MyTube is a self-hosted downloader and player for several video websit ...)
+ TODO: check
+CVE-2026-62301 (MyTube is a self-hosted downloader and player for several video websit ...)
+ TODO: check
+CVE-2026-62300 (Filecoin Pin is an IPFS Pinning Service API implementation that pins t ...)
+ TODO: check
+CVE-2026-62297 (ag-psd is a JavaScript library for reading and writing Photoshop Docum ...)
+ TODO: check
+CVE-2026-62284 (OSAC operator is a Kubernetes operator. In the affected revision ident ...)
+ TODO: check
+CVE-2026-62277 (LubeLogger is a self-hosted, open-source, web-based vehicle maintenanc ...)
+ TODO: check
+CVE-2026-62254 (LibreDWG is a free C library to read and write DWG files. Prior to 0.1 ...)
+ TODO: check
+CVE-2026-62250 (LibreDWG is a free C library to read and write DWG files. Prior to 0.1 ...)
+ TODO: check
+CVE-2026-61850 (Kargo manages and automates the promotion of software artifacts. From ...)
+ TODO: check
+CVE-2026-61725 (sevenz-rust2 is a Rust-native 7z compressor and `decompress`or. Prior ...)
+ TODO: check
+CVE-2026-61694 (go-xrpl is a Go implementation of the XRP Ledger protocol. In versions ...)
+ TODO: check
+CVE-2026-61620 (HoneySQL turns Clojure data structures into SQL. From 2.0.0 until 2.7. ...)
+ TODO: check
+CVE-2026-61618 (SNARK Verifier is a generic (S)NARK verifier. Prior to 0.2.5, KZG accu ...)
+ TODO: check
+CVE-2026-59993 (Picotls is a TLS protocol library that allows users select different c ...)
+ TODO: check
+CVE-2026-58412 (Filecoin Pin is an IPFS Pinning Service API implementation that pins t ...)
+ TODO: check
+CVE-2026-55614 (uhttpd is a small HTTP server. In unpatched repository snapshots, `cli ...)
+ TODO: check
+CVE-2026-55613 (uhttpd is a small HTTP server. In unpatched repository snapshots, `uh_ ...)
+ TODO: check
+CVE-2026-55612 (uhttpd is a small HTTP server. In unpatched repository snapshots, `cli ...)
+ TODO: check
+CVE-2026-55598 (PinePods is a complete, self-hosted podcast management system written ...)
+ TODO: check
+CVE-2026-55493 (HotCRP is conference review software. Starting with 2.101, the `cmt:` ...)
+ TODO: check
+CVE-2026-55147 (LORIS (Longitudinal Online Research and Imaging System) is a self-host ...)
+ TODO: check
+CVE-2026-55146 (LORIS (Longitudinal Online Research and Imaging System) is a self-host ...)
+ TODO: check
+CVE-2026-55098 (Arc is an open, SQL-native time-series database for telemetry. Prior t ...)
+ TODO: check
+CVE-2026-54610 (LibreDWG is a free C library to read and write DWG files. Prior to 0.1 ...)
+ TODO: check
+CVE-2026-40573 (NovumOS is a custom 32-bit operating system written in Zig and x86 Ass ...)
+ TODO: check
+CVE-2026-16760 (In Trail of Bits fickling through 0.1.12, the _process_import() method ...)
+ TODO: check
+CVE-2026-120040 (The Mail logging & Catcher plugin for WordPress is vulnerable to Sensi ...)
+ TODO: check
+CVE-2026-120019 (The W3 Total Cache plugin for WordPress is vulnerable to Stored Cross- ...)
+ TODO: check
+CVE-2026-11396 (The Product Filter for WooCommerce by WBW plugin for WordPress is vuln ...)
+ TODO: check
+CVE-2026-119980 (The UsersWP \u2013 Front-end login form, User Registration, User Profi ...)
+ TODO: check
+CVE-2026-119977 (WordPress Core is vulnerable to Remote Code Execution in versions 4.7 ...)
+ TODO: check
+CVE-2026-119730 (Maxthon Browser for Android before 7.5.8.103 contains an address bar s ...)
+ TODO: check
+CVE-2026-119343 (Stirling-PDF is a locally hosted web application that facilitates vari ...)
+ TODO: check
+CVE-2026-119342 (Stirling-PDF is a locally hosted web application that facilitates vari ...)
+ TODO: check
+CVE-2026-119341 (Tesseract is an open source OCR engine. Prior to 5.5.4, ReadAdaptedCla ...)
+ TODO: check
+CVE-2026-119340 (Tesseract is an open source OCR engine. Prior to 5.5.4, GENERIC_2D_ARR ...)
+ TODO: check
+CVE-2026-119339 (Tesseract is an open source OCR engine. Prior to 5.5.4, WeightMatrix:: ...)
+ TODO: check
+CVE-2026-119338 (Tesseract is an open source OCR engine. From 5.4.0 until 5.5.4, Append ...)
+ TODO: check
+CVE-2026-119337 (RAGFlow is an open-source RAG (Retrieval-Augmented Generation) engine. ...)
+ TODO: check
+CVE-2026-119336 (Pi-hole is a DNS sinkhole that protects devices from unwanted content ...)
+ TODO: check
+CVE-2026-119335 (Pi-hole is a DNS sinkhole that protects devices from unwanted content ...)
+ TODO: check
+CVE-2026-119334 (Pi-hole is a DNS sinkhole that protects devices from unwanted content ...)
+ TODO: check
+CVE-2026-119333 (draw.io Desktop is the official Electron build of draw.io. Prior to 31 ...)
+ TODO: check
+CVE-2026-119332 (Ladybird is a truly independent web browser. Prior to 209579c96473c75b ...)
+ TODO: check
+CVE-2026-119331 (Ladybird is a truly independent web browser. Prior to the c0d68bddf3e3 ...)
+ TODO: check
+CVE-2026-119330 (Immich is a high-performance self-hosted photo and video management so ...)
+ TODO: check
+CVE-2026-119329 (Immich is a high-performance self-hosted photo and video management so ...)
+ TODO: check
+CVE-2026-119328 (Immich is a high-performance self-hosted photo and video management so ...)
+ TODO: check
+CVE-2026-119166 (The Welcart e-Commerce plugin for WordPress is vulnerable to Insecure ...)
+ TODO: check
+CVE-2026-119163 (The FunnelKit Automations \u2013 Email Marketing Automation and CRM fo ...)
+ TODO: check
+CVE-2026-119162 (The User Submitted Posts \u2013 Enable Users to Submit Posts from the ...)
+ TODO: check
+CVE-2026-119089 (The ThirstyAffiliates \u2013 Affiliate Links, Link Branding, Link Trac ...)
+ TODO: check
+CVE-2026-119065 (The Shipping Zones by Drawing for WooCommerce plugin for WordPress is ...)
+ TODO: check
+CVE-2026-118938 (In Trail of Bits fickling through 0.1.12, a pickle STACK_GLOBAL operan ...)
+ TODO: check
+CVE-2026-118638 (The Mapster WP Maps WordPress plugin before 2.0.6 does not perform any ...)
+ TODO: check
+CVE-2026-118629 (The All-in-One Video Gallery WordPress plugin before 5.0.0 does not c ...)
+ TODO: check
+CVE-2026-118438 (The Firelight Lightbox WordPress plugin before 2.3.24 does not properl ...)
+ TODO: check
+CVE-2026-118437 (The BuddyForms WordPress plugin before 2.10.1 does not properly verify ...)
+ TODO: check
+CVE-2026-118185 (The Security Optimizer WordPress plugin before 1.6.9 does not limit t ...)
+ TODO: check
+CVE-2026-118184 (The Premium Packages WordPress plugin before 7.2.2 does not prevent u ...)
+ TODO: check
+CVE-2026-118070 (The Welcart e-Commerce plugin for WordPress is vulnerable to Stored Cr ...)
+ TODO: check
+CVE-2026-118043 (The Bulk Media Register WordPress plugin before 2.01 does not properly ...)
+ TODO: check
+CVE-2026-117666 (Improper Validation of Certificate with Host Mismatch vulnerability in ...)
+ TODO: check
+CVE-2026-117656 (Acceptance of Extraneous Untrusted Data With Trusted Data vulnerabilit ...)
+ TODO: check
+CVE-2026-117645 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
+ TODO: check
+CVE-2026-116755 (Improper Neutralization of Special Elements used in a Command ('Comman ...)
+ TODO: check
+CVE-2026-116563 (The Photo Gallery, Sliders, Proofing and Themes \u2013 NextGEN Gallery ...)
+ TODO: check
+CVE-2026-116557 (The WP Booking System - Booking Calendar plugin for WordPress is vulne ...)
+ TODO: check
+CVE-2026-116548 (The VikRentCar Car Rental Management System plugin for WordPress is vu ...)
+ TODO: check
+CVE-2026-116546 (The WP Job Portal \u2013 AI-Powered Recruitment System for Company or ...)
+ TODO: check
+CVE-2026-116522 (The Relevanssi \u2013 A Better Search plugin for WordPress is vulnerab ...)
+ TODO: check
+CVE-2026-116520 (The PPWP \u2013 Password Protect Pages plugin for WordPress is vulnera ...)
+ TODO: check
+CVE-2026-116252 (pgAdmin 4's materialized view refresh passed the target database's nam ...)
+ TODO: check
+CVE-2026-116251 (pgAdmin 4 did not invalidate a user's existing sessions when their pas ...)
+ TODO: check
+CVE-2026-116250 (In server mode pgAdmin 4 validates a path a user gives for a file in t ...)
+ TODO: check
+CVE-2026-116249 (In server mode pgAdmin 4 resolves a server's password file, SSL certif ...)
+ TODO: check
+CVE-2026-116248 (In pgAdmin 4 server mode only administrators are meant to share a serv ...)
+ TODO: check
+CVE-2026-116247 (When a server in pgAdmin 4 had no password file, client certificate or ...)
+ TODO: check
+CVE-2026-116246 (To pass a server's password to psql and to the utilities pgAdmin 4 run ...)
+ TODO: check
+CVE-2026-116245 (libpq looks a connection service up in the service file of the operati ...)
+ TODO: check
+CVE-2026-116244 (When a pgAdmin 4 connection was not meant to use a Kerberos user's del ...)
+ TODO: check
+CVE-2026-116243 (pgAdmin 4 runs pg_dump, pg_restore, pg_dumpall and psql from the binar ...)
+ TODO: check
+CVE-2026-116242 (pgAdmin 4 opens SSH tunnels with the sshtunnel library but gave it nei ...)
+ TODO: check
+CVE-2026-116241 (pgAdmin 4's Import/Export Data tool wraps a user's query export in a p ...)
+ TODO: check
+CVE-2026-116240 (In server mode pgAdmin 4 validates a path into the user's storage dire ...)
+ TODO: check
+CVE-2026-116239 (In server mode pgAdmin 4 keeps an account per authentication source, s ...)
+ TODO: check
+CVE-2026-116238 (In server mode pgAdmin 4 locks an internal account after MAX_LOGIN_ATT ...)
+ TODO: check
+CVE-2026-115840 (The VikRentCar Car Rental Management System plugin for WordPress is vu ...)
+ TODO: check
+CVE-2026-115830 (In Secret Server versions earlier than 12.3.1, a user under certain co ...)
+ TODO: check
+CVE-2026-115829 (In Secret Server versions earlier than 12.3.1, a user could bypass the ...)
+ TODO: check
+CVE-2026-115828 (In Secret Server versions earlier than 12.3.1, Secret Server did not a ...)
+ TODO: check
+CVE-2026-111578 (The PDF Invoices & Packing Slips for WooCommerce WordPress plugin from ...)
+ TODO: check
+CVE-2026-111477
+ REJECTED
+CVE-2026-111254 (The W3 Total Cache plugin for WordPress is vulnerable to Stored Cross- ...)
+ TODO: check
+CVE-2026-111109 (The Webmention plugin for WordPress is vulnerable to Stored Cross-Site ...)
+ TODO: check
+CVE-2026-110808 (The Essential Addons for Elementor WordPress plugin before 6.8.8 does ...)
+ TODO: check
+CVE-2026-110251 (The Photo Reviews for WooCommerce plugin for WordPress is vulnerable t ...)
+ TODO: check
+CVE-2026-110176 (The File Force Download module for Drupal 7 implements hook_file_downl ...)
+ TODO: check
+CVE-2026-110042 (The Payment Forms for Paystack WordPress plugin before 4.0.6 does not ...)
+ TODO: check
+CVE-2026-109997 (The Ninja Forms \u2013 Contact Form Builder with Calculators, Quizzes, ...)
+ TODO: check
+CVE-2026-109386 (The Hustle \u2013 Email Marketing, Lead Generation, Optins, Popups plu ...)
+ TODO: check
+CVE-2026-109234 (The Meow Lightbox plugin for WordPress is vulnerable to Stored Cross-S ...)
+ TODO: check
+CVE-2026-109220 (The PDF Invoice for WooCommerce + Drag and Drop Template Builder plugi ...)
+ TODO: check
+CVE-2026-109217 (The PDF Invoices & Packing Slips for WooCommerce plugin for WordPress ...)
+ TODO: check
+CVE-2026-109213
+ REJECTED
+CVE-2026-107765 (The Discussion Board \u2013 WordPress Forum Plugin plugin for WordPres ...)
+ TODO: check
+CVE-2026-107750 (The PDF Invoices & Packing Slips for WooCommerce plugin for WordPress ...)
+ TODO: check
+CVE-2026-107653 (The SureCart \u2013 Ecommerce Made Easy For Selling Physical Products, ...)
+ TODO: check
+CVE-2026-101326 (The The Ninja Forms \u2013 Contact Form Builder with Calculators, Quiz ...)
+ TODO: check
+CVE-2026-100155 (The The Ninja Forms \u2013 Contact Form Builder with Calculators, Quiz ...)
+ TODO: check
CVE-2026-XXXX [GHSA-6w3p-4pq7-j3mp: UEFI Secure Boot bypass via stack overflow vulnerability in signed fwupd EFI application]
- fwupd-efi 1:1.9-1
NOTE: https://github.com/fwupd/fwupd-efi/security/advisories/GHSA-6w3p-4pq7-j3mp
@@ -5212,24 +5544,31 @@ CVE-2026-13162 (An OS command vulnerability exists in CoreTec productthat allows
CVE-2026-12887 (In affected versions of Octopus Server, a user with permission to uplo ...)
NOT-FOR-US: Octopus Deploy
CVE-2026-118180 (When logging in to a Matrix account, Thunderbird used the homeserver a ...)
+ {DSA-6598-1}
- thunderbird 1:153.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-118180
CVE-2026-118179 (Clicking a news: or snews: link that referenced a message-ID made Thun ...)
+ {DSA-6598-1}
- thunderbird 1:153.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-118179
CVE-2026-118178 (A remote RSS feed could use the itunes:new-feed-url or newLocation ele ...)
+ {DSA-6598-1}
- thunderbird 1:153.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-118178
CVE-2026-118177 (When looking for calendars in a directory on a server, during account ...)
+ {DSA-6598-1}
- thunderbird 1:153.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-118177
CVE-2026-118176 (Thunderbird's check that prevents mailbox: URLs from accessing files o ...)
+ {DSA-6598-1}
- thunderbird 1:153.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-118176
CVE-2026-118175 (When replying to, forwarding, or editing a crafted email message as ne ...)
+ {DSA-6598-1}
- thunderbird 1:153.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-118175
CVE-2026-118174 (When a message containing an OpenPGP key attachment was displayed, Thu ...)
+ {DSA-6598-1}
- thunderbird 1:153.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-118174
CVE-2026-118173 (MISP Guard, a proxy that enforces security policies on MISP feed data, ...)
@@ -5313,7 +5652,7 @@ CVE-2026-118005 (Use-after-free in the WebRTC: Signaling component. This vulnera
- firefox 159.0-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-118005
CVE-2026-118004 (Incorrect boundary conditions in the CSS Transitions and Animations co ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5321,7 +5660,7 @@ CVE-2026-118004 (Incorrect boundary conditions in the CSS Transitions and Animat
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-118004
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-118004
CVE-2026-118003 (Information disclosure in the Networking: DNS component. This vulnerab ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5329,7 +5668,7 @@ CVE-2026-118003 (Information disclosure in the Networking: DNS component. This v
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-118003
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-118003
CVE-2026-118002 (Information disclosure due to race condition in the Networking compone ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5337,7 +5676,7 @@ CVE-2026-118002 (Information disclosure due to race condition in the Networking
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-118002
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-118002
CVE-2026-118000 (Information disclosure in the Networking: HTTP component. This vulnera ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5345,7 +5684,7 @@ CVE-2026-118000 (Information disclosure in the Networking: HTTP component. This
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-118000
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-118000
CVE-2026-117999 (Race condition in the IPC component. This vulnerability was fixed in F ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5353,7 +5692,7 @@ CVE-2026-117999 (Race condition in the IPC component. This vulnerability was fix
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117999
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117999
CVE-2026-117998 (Mitigation bypass in the DOM: Push Subscriptions component. This vulne ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5361,7 +5700,7 @@ CVE-2026-117998 (Mitigation bypass in the DOM: Push Subscriptions component. Thi
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117998
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117998
CVE-2026-117997 (Sandbox escape due to use-after-free in the Widget component. This vul ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5369,7 +5708,7 @@ CVE-2026-117997 (Sandbox escape due to use-after-free in the Widget component. T
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117997
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117997
CVE-2026-117996 (Incorrect boundary conditions in the WebRTC component. This vulnerabil ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5377,7 +5716,7 @@ CVE-2026-117996 (Incorrect boundary conditions in the WebRTC component. This vul
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117996
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117996
CVE-2026-117995 (Privilege escalation in the DOM: UI Events & Focus Handling component. ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5385,7 +5724,7 @@ CVE-2026-117995 (Privilege escalation in the DOM: UI Events & Focus Handling com
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117995
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117995
CVE-2026-117994 (Use-after-free in the JavaScript: GC component. This vulnerability was ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5393,7 +5732,7 @@ CVE-2026-117994 (Use-after-free in the JavaScript: GC component. This vulnerabil
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117994
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117994
CVE-2026-117993 (Integer overflow in the Graphics: Text component. This vulnerability w ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5401,7 +5740,7 @@ CVE-2026-117993 (Integer overflow in the Graphics: Text component. This vulnerab
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117993
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117993
CVE-2026-117992 (Information disclosure in the CSS Parsing and Computation component. T ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5409,7 +5748,7 @@ CVE-2026-117992 (Information disclosure in the CSS Parsing and Computation compo
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117992
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117992
CVE-2026-117991 (Incorrect boundary conditions in the Layout: Text and Fonts component. ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5417,7 +5756,7 @@ CVE-2026-117991 (Incorrect boundary conditions in the Layout: Text and Fonts com
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117991
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117991
CVE-2026-117990 (Sandbox escape due to incorrect boundary conditions in the Graphics: W ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5425,7 +5764,7 @@ CVE-2026-117990 (Sandbox escape due to incorrect boundary conditions in the Grap
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117990
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117990
CVE-2026-117989 (Use-after-free in the Graphics component. This vulnerability was fixed ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5433,7 +5772,7 @@ CVE-2026-117989 (Use-after-free in the Graphics component. This vulnerability wa
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117989
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117989
CVE-2026-117988 (Sandbox escape due to incorrect boundary conditions in the Graphics: C ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5441,7 +5780,7 @@ CVE-2026-117988 (Sandbox escape due to incorrect boundary conditions in the Grap
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117988
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117988
CVE-2026-117987 (Use-after-free in the Graphics component. This vulnerability was fixed ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5449,7 +5788,7 @@ CVE-2026-117987 (Use-after-free in the Graphics component. This vulnerability wa
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117987
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117987
CVE-2026-117986 (Use-after-free in the Graphics component. This vulnerability was fixed ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5457,7 +5796,7 @@ CVE-2026-117986 (Use-after-free in the Graphics component. This vulnerability wa
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117986
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117986
CVE-2026-117985 (Sandbox escape due to use-after-free in the Graphics component. This v ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5465,7 +5804,7 @@ CVE-2026-117985 (Sandbox escape due to use-after-free in the Graphics component.
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117985
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117985
CVE-2026-117984 (Incorrect boundary conditions in the Layout: Scrolling and Overflow co ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5473,7 +5812,7 @@ CVE-2026-117984 (Incorrect boundary conditions in the Layout: Scrolling and Over
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117984
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117984
CVE-2026-117983 (Use-after-free in the Graphics component. This vulnerability was fixed ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5481,7 +5820,7 @@ CVE-2026-117983 (Use-after-free in the Graphics component. This vulnerability wa
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117983
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117983
CVE-2026-117982 (Invalid pointer in the JavaScript Engine: JIT component. This vulnerab ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5489,7 +5828,7 @@ CVE-2026-117982 (Invalid pointer in the JavaScript Engine: JIT component. This v
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117982
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117982
CVE-2026-117981 (Privilege escalation in the Toolkit component. This vulnerability was ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5497,7 +5836,7 @@ CVE-2026-117981 (Privilege escalation in the Toolkit component. This vulnerabili
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117981
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117981
CVE-2026-117980 (Use-after-free in the Graphics component. This vulnerability was fixed ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5505,7 +5844,7 @@ CVE-2026-117980 (Use-after-free in the Graphics component. This vulnerability wa
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117980
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117980
CVE-2026-117979 (Incorrect boundary conditions in the Graphics: WebRender component. Th ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5513,7 +5852,7 @@ CVE-2026-117979 (Incorrect boundary conditions in the Graphics: WebRender compon
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117979
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117979
CVE-2026-117978 (Incorrect boundary conditions in the Graphics component. This vulnerab ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5521,7 +5860,7 @@ CVE-2026-117978 (Incorrect boundary conditions in the Graphics component. This v
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117978
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117978
CVE-2026-117977 (Other issue in the Console component. This vulnerability was fixed in ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5529,7 +5868,7 @@ CVE-2026-117977 (Other issue in the Console component. This vulnerability was fi
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117977
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117977
CVE-2026-117976 (Site isolation issue in the DOM: Navigation component. This vulnerabil ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5537,7 +5876,7 @@ CVE-2026-117976 (Site isolation issue in the DOM: Navigation component. This vul
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117976
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117976
CVE-2026-117975 (Sandbox escape due to invalid pointer in the Graphics: WebRender compo ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5545,7 +5884,7 @@ CVE-2026-117975 (Sandbox escape due to invalid pointer in the Graphics: WebRende
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117975
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117975
CVE-2026-117974 (Use-after-free in the XML component. This vulnerability was fixed in F ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5553,7 +5892,7 @@ CVE-2026-117974 (Use-after-free in the XML component. This vulnerability was fix
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117974
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117974
CVE-2026-117973 (Use-after-free in the Networking: DNS component. This vulnerability wa ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5561,7 +5900,7 @@ CVE-2026-117973 (Use-after-free in the Networking: DNS component. This vulnerabi
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117973
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117973
CVE-2026-117972 (Use-after-free in the Graphics component. This vulnerability was fixed ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5569,7 +5908,7 @@ CVE-2026-117972 (Use-after-free in the Graphics component. This vulnerability wa
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117972
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117972
CVE-2026-117971 (Sandbox escape due to use-after-free in the Print Preview component. T ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5577,7 +5916,7 @@ CVE-2026-117971 (Sandbox escape due to use-after-free in the Print Preview compo
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117971
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117971
CVE-2026-117970 (Race condition in the Disability Access APIs component. This vulnerabi ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5585,7 +5924,7 @@ CVE-2026-117970 (Race condition in the Disability Access APIs component. This vu
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117970
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117970
CVE-2026-117969 (Invalid pointer in the JavaScript Engine: JIT component. This vulnerab ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5593,7 +5932,7 @@ CVE-2026-117969 (Invalid pointer in the JavaScript Engine: JIT component. This v
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117969
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117969
CVE-2026-117968 (Use-after-free in the DOM: Core & HTML component. This vulnerability w ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5601,7 +5940,7 @@ CVE-2026-117968 (Use-after-free in the DOM: Core & HTML component. This vulnerab
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117968
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117968
CVE-2026-117967 (Mitigation bypass in the DOM: Security component. This vulnerability w ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5609,7 +5948,7 @@ CVE-2026-117967 (Mitigation bypass in the DOM: Security component. This vulnerab
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117967
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117967
CVE-2026-117966 (Site isolation issue in the Networking: HTTP component. This vulnerabi ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5617,7 +5956,7 @@ CVE-2026-117966 (Site isolation issue in the Networking: HTTP component. This vu
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117966
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117966
CVE-2026-117965 (Same-origin policy bypass in the Address Bar component. This vulnerabi ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5625,7 +5964,7 @@ CVE-2026-117965 (Same-origin policy bypass in the Address Bar component. This vu
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117965
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117965
CVE-2026-117964 (Use-after-free in the Panning and Zooming component. This vulnerabilit ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5633,7 +5972,7 @@ CVE-2026-117964 (Use-after-free in the Panning and Zooming component. This vulne
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117964
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117964
CVE-2026-117963 (Incorrect boundary conditions in the DOM: Service Workers component. T ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5641,7 +5980,7 @@ CVE-2026-117963 (Incorrect boundary conditions in the DOM: Service Workers compo
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117963
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117963
CVE-2026-117962 (Sandbox escape due to incorrect boundary conditions in the Storage: Qu ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5649,7 +5988,7 @@ CVE-2026-117962 (Sandbox escape due to incorrect boundary conditions in the Stor
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117962
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117962
CVE-2026-117961 (Incorrect boundary conditions in the Layout: Text and Fonts component. ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5657,7 +5996,7 @@ CVE-2026-117961 (Incorrect boundary conditions in the Layout: Text and Fonts com
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117961
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117961
CVE-2026-117960 (Spoofing issue in the DOM: Core & HTML component. This vulnerability w ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5665,7 +6004,7 @@ CVE-2026-117960 (Spoofing issue in the DOM: Core & HTML component. This vulnerab
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117960
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117960
CVE-2026-117959 (Site isolation issue in the DOM: Service Workers component. This vulne ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5673,7 +6012,7 @@ CVE-2026-117959 (Site isolation issue in the DOM: Service Workers component. Thi
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117959
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117959
CVE-2026-117958 (Site isolation issue in the Networking: HTTP component. This vulnerabi ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5681,7 +6020,7 @@ CVE-2026-117958 (Site isolation issue in the Networking: HTTP component. This vu
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117958
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117958
CVE-2026-117957 (Cryptographic issue in the WebRTC: Networking component. This vulnerab ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5689,7 +6028,7 @@ CVE-2026-117957 (Cryptographic issue in the WebRTC: Networking component. This v
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117957
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117957
CVE-2026-117956 (Invalid pointer in the Nimbus Desktop Client component. This vulnerabi ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5697,7 +6036,7 @@ CVE-2026-117956 (Invalid pointer in the Nimbus Desktop Client component. This vu
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117956
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117956
CVE-2026-117955 (JIT miscompilation in the JavaScript: WebAssembly component. This vuln ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5705,7 +6044,7 @@ CVE-2026-117955 (JIT miscompilation in the JavaScript: WebAssembly component. Th
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117955
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117955
CVE-2026-117954 (Use-after-free in the Layout: Positioned component. This vulnerability ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5713,7 +6052,7 @@ CVE-2026-117954 (Use-after-free in the Layout: Positioned component. This vulner
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117954
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117954
CVE-2026-117953 (Use-after-free in the DOM: Core & HTML component. This vulnerability w ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5721,7 +6060,7 @@ CVE-2026-117953 (Use-after-free in the DOM: Core & HTML component. This vulnerab
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117953
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117953
CVE-2026-117952 (Uninitialized memory in the Networking component. This vulnerability w ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5729,7 +6068,7 @@ CVE-2026-117952 (Uninitialized memory in the Networking component. This vulnerab
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117952
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117952
CVE-2026-117951 (Use-after-free in the DOM: Core & HTML component. This vulnerability w ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5737,7 +6076,7 @@ CVE-2026-117951 (Use-after-free in the DOM: Core & HTML component. This vulnerab
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117951
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117951
CVE-2026-117950 (Incorrect boundary conditions in the DOM: Core & HTML component. This ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5745,7 +6084,7 @@ CVE-2026-117950 (Incorrect boundary conditions in the DOM: Core & HTML component
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117950
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117950
CVE-2026-117949 (Use-after-free in the DOM: Core & HTML component. This vulnerability w ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5753,7 +6092,7 @@ CVE-2026-117949 (Use-after-free in the DOM: Core & HTML component. This vulnerab
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117949
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117949
CVE-2026-117948 (Use-after-free in the SVG component. This vulnerability was fixed in F ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5761,7 +6100,7 @@ CVE-2026-117948 (Use-after-free in the SVG component. This vulnerability was fix
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117948
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117948
CVE-2026-117947 (Use-after-free in the XML component. This vulnerability was fixed in F ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5769,7 +6108,7 @@ CVE-2026-117947 (Use-after-free in the XML component. This vulnerability was fix
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117947
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117947
CVE-2026-117946 (Incorrect boundary conditions in the JavaScript Engine component. This ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5777,7 +6116,7 @@ CVE-2026-117946 (Incorrect boundary conditions in the JavaScript Engine componen
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117946
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117946
CVE-2026-117945 (Incorrect boundary conditions in the XML component. This vulnerability ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5785,7 +6124,7 @@ CVE-2026-117945 (Incorrect boundary conditions in the XML component. This vulner
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117945
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117945
CVE-2026-117944 (Use-after-free in the Layout component. This vulnerability was fixed i ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5793,7 +6132,7 @@ CVE-2026-117944 (Use-after-free in the Layout component. This vulnerability was
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117944
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117944
CVE-2026-117943 (Use-after-free in the DOM: Core & HTML component. This vulnerability w ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5801,7 +6140,7 @@ CVE-2026-117943 (Use-after-free in the DOM: Core & HTML component. This vulnerab
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117943
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117943
CVE-2026-117942 (Incorrect boundary conditions in the JavaScript Engine: JIT component. ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5809,7 +6148,7 @@ CVE-2026-117942 (Incorrect boundary conditions in the JavaScript Engine: JIT com
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117942
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117942
CVE-2026-117941 (Use-after-free in the DOM: CSS Object Model component. This vulnerabil ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5817,7 +6156,7 @@ CVE-2026-117941 (Use-after-free in the DOM: CSS Object Model component. This vul
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117941
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117941
CVE-2026-117940 (Use-after-free in the DOM: Core & HTML component. This vulnerability w ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5825,7 +6164,7 @@ CVE-2026-117940 (Use-after-free in the DOM: Core & HTML component. This vulnerab
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117940
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117940
CVE-2026-117939 (Use-after-free in the XML component. This vulnerability was fixed in F ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5833,7 +6172,7 @@ CVE-2026-117939 (Use-after-free in the XML component. This vulnerability was fix
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117939
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117939
CVE-2026-117938 (Use-after-free in the Layout component. This vulnerability was fixed i ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5841,7 +6180,7 @@ CVE-2026-117938 (Use-after-free in the Layout component. This vulnerability was
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117938
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117938
CVE-2026-117937 (Invalid pointer in the JavaScript Engine component. This vulnerability ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5849,7 +6188,7 @@ CVE-2026-117937 (Invalid pointer in the JavaScript Engine component. This vulner
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117937
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117937
CVE-2026-117936 (Use-after-free in the DOM: Core & HTML component. This vulnerability w ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5857,7 +6196,7 @@ CVE-2026-117936 (Use-after-free in the DOM: Core & HTML component. This vulnerab
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117936
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117936
CVE-2026-117935 (Use-after-free in the DOM: Bindings (WebIDL) component. This vulnerabi ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5865,7 +6204,7 @@ CVE-2026-117935 (Use-after-free in the DOM: Bindings (WebIDL) component. This vu
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117935
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117935
CVE-2026-117934 (Use-after-free in the Layout component. This vulnerability was fixed i ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5873,7 +6212,7 @@ CVE-2026-117934 (Use-after-free in the Layout component. This vulnerability was
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117934
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117934
CVE-2026-117933 (Frame poisoning in the CSS Parsing and Computation component. This vul ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5881,7 +6220,7 @@ CVE-2026-117933 (Frame poisoning in the CSS Parsing and Computation component. T
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117933
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117933
CVE-2026-117932 (Use-after-free in the DOM: Core & HTML component. This vulnerability w ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5889,7 +6228,7 @@ CVE-2026-117932 (Use-after-free in the DOM: Core & HTML component. This vulnerab
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117932
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117932
CVE-2026-117931 (Use-after-free in the DOM: Events component. This vulnerability was fi ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5897,7 +6236,7 @@ CVE-2026-117931 (Use-after-free in the DOM: Events component. This vulnerability
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117931
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117931
CVE-2026-117930 (Use-after-free in the DOM: Bindings (WebIDL) component. This vulnerabi ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5905,7 +6244,7 @@ CVE-2026-117930 (Use-after-free in the DOM: Bindings (WebIDL) component. This vu
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117930
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117930
CVE-2026-117929 (Use-after-free in the DOM: Core & HTML component. This vulnerability w ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5913,7 +6252,7 @@ CVE-2026-117929 (Use-after-free in the DOM: Core & HTML component. This vulnerab
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117929
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117929
CVE-2026-117928 (Same-origin policy bypass in the CSS Parsing and Computation component ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5921,7 +6260,7 @@ CVE-2026-117928 (Same-origin policy bypass in the CSS Parsing and Computation co
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117928
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117928
CVE-2026-117927 (Use-after-free in the SVG component. This vulnerability was fixed in F ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5929,7 +6268,7 @@ CVE-2026-117927 (Use-after-free in the SVG component. This vulnerability was fix
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117927
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117927
CVE-2026-117926 (Incorrect boundary conditions in the SVG component. This vulnerability ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5937,7 +6276,7 @@ CVE-2026-117926 (Incorrect boundary conditions in the SVG component. This vulner
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117926
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117926
CVE-2026-117925 (Use-after-free in the DOM: Core & HTML component. This vulnerability w ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5945,7 +6284,7 @@ CVE-2026-117925 (Use-after-free in the DOM: Core & HTML component. This vulnerab
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117925
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117925
CVE-2026-117924 (Use-after-free in the XSLT component. This vulnerability was fixed in ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5953,7 +6292,7 @@ CVE-2026-117924 (Use-after-free in the XSLT component. This vulnerability was fi
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117924
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117924
CVE-2026-117923 (Use-after-free in the Audio/Video component. This vulnerability was fi ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5961,7 +6300,7 @@ CVE-2026-117923 (Use-after-free in the Audio/Video component. This vulnerability
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117923
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117923
CVE-2026-117922 (Use-after-free in the Networking: WebSockets component. This vulnerabi ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5969,7 +6308,7 @@ CVE-2026-117922 (Use-after-free in the Networking: WebSockets component. This vu
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117922
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117922
CVE-2026-117921 (Use-after-free in the CSS Parsing and Computation component. This vuln ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5977,7 +6316,7 @@ CVE-2026-117921 (Use-after-free in the CSS Parsing and Computation component. Th
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117921
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117921
CVE-2026-117920 (Use-after-free in the DOM: HTML Parser component. This vulnerability w ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5985,7 +6324,7 @@ CVE-2026-117920 (Use-after-free in the DOM: HTML Parser component. This vulnerab
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117920
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117920
CVE-2026-117919 (Use-after-free in the DOM: Core & HTML component. This vulnerability w ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5993,7 +6332,7 @@ CVE-2026-117919 (Use-after-free in the DOM: Core & HTML component. This vulnerab
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117919
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117919
CVE-2026-117918 (Use-after-free in the Graphics: Canvas2D component. This vulnerability ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6001,7 +6340,7 @@ CVE-2026-117918 (Use-after-free in the Graphics: Canvas2D component. This vulner
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117918
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117918
CVE-2026-117917 (Invalid pointer in the Graphics: WebRender component. This vulnerabili ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6009,7 +6348,7 @@ CVE-2026-117917 (Invalid pointer in the Graphics: WebRender component. This vuln
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117917
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117917
CVE-2026-117916 (Use-after-free in the XSLT component. This vulnerability was fixed in ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6017,7 +6356,7 @@ CVE-2026-117916 (Use-after-free in the XSLT component. This vulnerability was fi
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117916
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117916
CVE-2026-117915 (Incorrect boundary conditions in the Layout: Block and Inline componen ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6025,7 +6364,7 @@ CVE-2026-117915 (Incorrect boundary conditions in the Layout: Block and Inline c
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117915
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117915
CVE-2026-117914 (Use-after-free in the SVG component. This vulnerability was fixed in F ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6033,7 +6372,7 @@ CVE-2026-117914 (Use-after-free in the SVG component. This vulnerability was fix
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117914
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117914
CVE-2026-117913 (Use-after-free in the SVG component. This vulnerability was fixed in F ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6041,7 +6380,7 @@ CVE-2026-117913 (Use-after-free in the SVG component. This vulnerability was fix
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117913
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117913
CVE-2026-117912 (Same-origin policy bypass in the CSS Parsing and Computation component ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6049,7 +6388,7 @@ CVE-2026-117912 (Same-origin policy bypass in the CSS Parsing and Computation co
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117912
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117912
CVE-2026-117911 (Use-after-free in the Audio/Video: Playback component. This vulnerabil ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6057,7 +6396,7 @@ CVE-2026-117911 (Use-after-free in the Audio/Video: Playback component. This vul
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117911
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117911
CVE-2026-117910 (Invalid pointer in the JavaScript Engine component. This vulnerability ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6065,7 +6404,7 @@ CVE-2026-117910 (Invalid pointer in the JavaScript Engine component. This vulner
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117910
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117910
CVE-2026-117909 (Use-after-free in the JavaScript: GC component. This vulnerability was ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6073,7 +6412,7 @@ CVE-2026-117909 (Use-after-free in the JavaScript: GC component. This vulnerabil
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117909
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117909
CVE-2026-117908 (Use-after-free in the Graphics: ImageLib component. This vulnerability ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6081,7 +6420,7 @@ CVE-2026-117908 (Use-after-free in the Graphics: ImageLib component. This vulner
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117908
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117908
CVE-2026-117907 (Use-after-free in the Networking component. This vulnerability was fix ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6089,7 +6428,7 @@ CVE-2026-117907 (Use-after-free in the Networking component. This vulnerability
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117907
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117907
CVE-2026-117906 (Use-after-free in the CSS Parsing and Computation component. This vuln ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6097,7 +6436,7 @@ CVE-2026-117906 (Use-after-free in the CSS Parsing and Computation component. Th
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117906
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117906
CVE-2026-117905 (Use-after-free in the Audio/Video: Playback component. This vulnerabil ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6105,7 +6444,7 @@ CVE-2026-117905 (Use-after-free in the Audio/Video: Playback component. This vul
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117905
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117905
CVE-2026-117904 (Use-after-free in the JavaScript: GC component. This vulnerability was ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6113,7 +6452,7 @@ CVE-2026-117904 (Use-after-free in the JavaScript: GC component. This vulnerabil
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117904
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117904
CVE-2026-117903 (Use-after-free in the Audio/Video component. This vulnerability was fi ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6121,7 +6460,7 @@ CVE-2026-117903 (Use-after-free in the Audio/Video component. This vulnerability
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117903
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117903
CVE-2026-117902 (Use-after-free in the Layout: Text and Fonts component. This vulnerabi ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6129,7 +6468,7 @@ CVE-2026-117902 (Use-after-free in the Layout: Text and Fonts component. This vu
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117902
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117902
CVE-2026-117901 (Use-after-free in the DOM: Core & HTML component. This vulnerability w ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6137,7 +6476,7 @@ CVE-2026-117901 (Use-after-free in the DOM: Core & HTML component. This vulnerab
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117901
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117901
CVE-2026-117900 (Use-after-free in the DOM: Editor component. This vulnerability was fi ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6145,7 +6484,7 @@ CVE-2026-117900 (Use-after-free in the DOM: Editor component. This vulnerability
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117900
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117900
CVE-2026-117899 (Use-after-free in the Networking: HTTP component. This vulnerability w ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6153,7 +6492,7 @@ CVE-2026-117899 (Use-after-free in the Networking: HTTP component. This vulnerab
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117899
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117899
CVE-2026-117898 (Use-after-free in the JavaScript Engine: JIT component. This vulnerabi ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6161,7 +6500,7 @@ CVE-2026-117898 (Use-after-free in the JavaScript Engine: JIT component. This vu
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117898
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117898
CVE-2026-117897 (Incorrect boundary conditions in the Layout: Tables component. This vu ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6169,7 +6508,7 @@ CVE-2026-117897 (Incorrect boundary conditions in the Layout: Tables component.
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117897
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117897
CVE-2026-117896 (Use-after-free in the DOM: Core & HTML component. This vulnerability w ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6177,7 +6516,7 @@ CVE-2026-117896 (Use-after-free in the DOM: Core & HTML component. This vulnerab
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117896
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117896
CVE-2026-117895 (Use-after-free in the DOM: Core & HTML component. This vulnerability w ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6185,7 +6524,7 @@ CVE-2026-117895 (Use-after-free in the DOM: Core & HTML component. This vulnerab
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117895
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117895
CVE-2026-117894 (Incorrect boundary conditions in the WebRTC: Signaling component. This ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6193,7 +6532,7 @@ CVE-2026-117894 (Incorrect boundary conditions in the WebRTC: Signaling componen
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117894
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117894
CVE-2026-117893 (Incorrect boundary conditions in the Security: PSM component. This vul ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6201,7 +6540,7 @@ CVE-2026-117893 (Incorrect boundary conditions in the Security: PSM component. T
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117893
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117893
CVE-2026-117892 (Privilege escalation due to use-after-free in the WebRTC: Networking c ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6209,7 +6548,7 @@ CVE-2026-117892 (Privilege escalation due to use-after-free in the WebRTC: Netwo
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117892
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117892
CVE-2026-117891 (Use-after-free in the JavaScript Engine: JIT component. This vulnerabi ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6217,7 +6556,7 @@ CVE-2026-117891 (Use-after-free in the JavaScript Engine: JIT component. This vu
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117891
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117891
CVE-2026-117890 (JIT miscompilation in the JavaScript Engine: JIT component. This vulne ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6225,7 +6564,7 @@ CVE-2026-117890 (JIT miscompilation in the JavaScript Engine: JIT component. Thi
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117890
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117890
CVE-2026-117889 (Incorrect boundary conditions in the JavaScript Engine component. This ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6233,7 +6572,7 @@ CVE-2026-117889 (Incorrect boundary conditions in the JavaScript Engine componen
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117889
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117889
CVE-2026-117888 (Uninitialized memory in the Graphics: Canvas2D component. This vulnera ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6241,7 +6580,7 @@ CVE-2026-117888 (Uninitialized memory in the Graphics: Canvas2D component. This
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117888
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117888
CVE-2026-117887 (Use-after-free in the DOM: Core & HTML component. This vulnerability w ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6249,7 +6588,7 @@ CVE-2026-117887 (Use-after-free in the DOM: Core & HTML component. This vulnerab
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117887
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117887
CVE-2026-117886 (Incorrect boundary conditions in the Graphics: Text component. This vu ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6257,7 +6596,7 @@ CVE-2026-117886 (Incorrect boundary conditions in the Graphics: Text component.
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117886
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117886
CVE-2026-117885 (Use-after-free in the Layout: Grid component. This vulnerability was f ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6265,7 +6604,7 @@ CVE-2026-117885 (Use-after-free in the Layout: Grid component. This vulnerabilit
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117885
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117885
CVE-2026-117884 (Use-after-free in the Networking component. This vulnerability was fix ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6273,7 +6612,7 @@ CVE-2026-117884 (Use-after-free in the Networking component. This vulnerability
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117884
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117884
CVE-2026-117883 (Use-after-free in the DOM: HTML Parser component. This vulnerability w ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6281,7 +6620,7 @@ CVE-2026-117883 (Use-after-free in the DOM: HTML Parser component. This vulnerab
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117883
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117883
CVE-2026-117882 (Use-after-free in the Layout component. This vulnerability was fixed i ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6289,7 +6628,7 @@ CVE-2026-117882 (Use-after-free in the Layout component. This vulnerability was
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117882
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117882
CVE-2026-117881 (Use-after-free in the DOM: Core & HTML component. This vulnerability w ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6297,7 +6636,7 @@ CVE-2026-117881 (Use-after-free in the DOM: Core & HTML component. This vulnerab
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117881
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117881
CVE-2026-117880 (Use-after-free in the XML component. This vulnerability was fixed in F ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6305,7 +6644,7 @@ CVE-2026-117880 (Use-after-free in the XML component. This vulnerability was fix
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117880
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117880
CVE-2026-117879 (Incorrect boundary conditions in the Layout: Tables component. This vu ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6313,7 +6652,7 @@ CVE-2026-117879 (Incorrect boundary conditions in the Layout: Tables component.
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117879
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117879
CVE-2026-117878 (Other issue, use-after-free in the Storage: IndexedDB component. This ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6321,7 +6660,7 @@ CVE-2026-117878 (Other issue, use-after-free in the Storage: IndexedDB component
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117878
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117878
CVE-2026-117877 (Use-after-free in the Layout: Text and Fonts component. This vulnerabi ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6329,7 +6668,7 @@ CVE-2026-117877 (Use-after-free in the Layout: Text and Fonts component. This vu
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117877
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117877
CVE-2026-117876 (Use-after-free in the Layout: Text and Fonts component. This vulnerabi ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6337,7 +6676,7 @@ CVE-2026-117876 (Use-after-free in the Layout: Text and Fonts component. This vu
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117876
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117876
CVE-2026-117875 (Use-after-free in the Layout: Scrolling and Overflow component. This v ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6345,7 +6684,7 @@ CVE-2026-117875 (Use-after-free in the Layout: Scrolling and Overflow component.
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117875
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117875
CVE-2026-117874 (Use-after-free in the Internationalization component. This vulnerabili ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6353,7 +6692,7 @@ CVE-2026-117874 (Use-after-free in the Internationalization component. This vuln
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117874
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117874
CVE-2026-117873 (Incorrect boundary conditions in the Audio/Video: Playback component. ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6361,7 +6700,7 @@ CVE-2026-117873 (Incorrect boundary conditions in the Audio/Video: Playback comp
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117873
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117873
CVE-2026-117872 (Use-after-free in the JavaScript: Standard Library component. This vul ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6369,7 +6708,7 @@ CVE-2026-117872 (Use-after-free in the JavaScript: Standard Library component. T
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117872
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117872
CVE-2026-117871 (Invalid pointer in the Graphics component. This vulnerability was fixe ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6377,7 +6716,7 @@ CVE-2026-117871 (Invalid pointer in the Graphics component. This vulnerability w
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117871
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117871
CVE-2026-117870 (Use-after-free in the JavaScript Engine component. This vulnerability ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6385,7 +6724,7 @@ CVE-2026-117870 (Use-after-free in the JavaScript Engine component. This vulnera
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117870
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117870
CVE-2026-117869 (Use-after-free in the DOM: Core & HTML component. This vulnerability w ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6393,7 +6732,7 @@ CVE-2026-117869 (Use-after-free in the DOM: Core & HTML component. This vulnerab
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117869
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117869
CVE-2026-117868 (Sandbox escape in the DOM: Networking component. This vulnerability wa ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6401,7 +6740,7 @@ CVE-2026-117868 (Sandbox escape in the DOM: Networking component. This vulnerabi
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117868
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117868
CVE-2026-117867 (Use-after-free in the Layout component. This vulnerability was fixed i ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6409,7 +6748,7 @@ CVE-2026-117867 (Use-after-free in the Layout component. This vulnerability was
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117867
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117867
CVE-2026-117866 (Privilege escalation due to use-after-free in the Graphics: Canvas2D c ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6417,7 +6756,7 @@ CVE-2026-117866 (Privilege escalation due to use-after-free in the Graphics: Can
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117866
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117866
CVE-2026-117865 (Use-after-free in the JavaScript: GC component. This vulnerability was ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6425,7 +6764,7 @@ CVE-2026-117865 (Use-after-free in the JavaScript: GC component. This vulnerabil
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117865
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117865
CVE-2026-117864 (Sandbox escape in the Form Manager component. This vulnerability was f ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6433,7 +6772,7 @@ CVE-2026-117864 (Sandbox escape in the Form Manager component. This vulnerabilit
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117864
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117864
CVE-2026-117863 (Information disclosure due to uninitialized memory in the Audio/Video ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6441,7 +6780,7 @@ CVE-2026-117863 (Information disclosure due to uninitialized memory in the Audio
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117863
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117863
CVE-2026-117862 (Privilege escalation due to incorrect boundary conditions in the Netwo ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6449,7 +6788,7 @@ CVE-2026-117862 (Privilege escalation due to incorrect boundary conditions in th
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117862
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117862
CVE-2026-117861 (Sandbox escape in the DOM: Navigation component. This vulnerability wa ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6457,7 +6796,7 @@ CVE-2026-117861 (Sandbox escape in the DOM: Navigation component. This vulnerabi
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117861
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117861
CVE-2026-117860 (Same-origin policy bypass in the DOM: Navigation component. This vulne ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -22016,7 +22355,7 @@ CVE-2026-98433 (In the Linux kernel, the following vulnerability has been resolv
[bookworm] - linux 6.1.190-1
NOTE: https://git.kernel.org/linus/0a416ee20bcccddf91ca5b63696a23b9d11d73aa (7.3-rc4)
CVE-2026-114145 (GitPython is a python library used to interact with Git repositories. ...)
- {DSA-6594-1}
+ {DSA-6594-1 DLA-4872-1}
- python-git 3.2.1-1
NOTE: https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-83vg-56qc-22m7
NOTE: https://github.com/gitpython-developers/GitPython/pull/2264
@@ -24587,33 +24926,34 @@ CVE-2026-110862 (Better Auth from 1.4.0-beta.18 before 1.7.7 contains an authent
CVE-2026-110861 (Better Auth @better-auth/drizzle-adapter and better-auth from 1.6.17 b ...)
NOT-FOR-US: Better Auth
CVE-2026-110860 (GitPython from 3.1.62 before 3.2.0 contains a symlink-following flaw i ...)
- {DSA-6594-1}
+ {DSA-6594-1 DLA-4872-1}
- python-git 3.2.1-1
NOTE: https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-gq48-pqfc-9p58
NOTE: Fixed by: https://github.com/gitpython-developers/GitPython/commit/fb7e089ee0a3394c67057c11bb7f92682ac7960d (3.2.0)
CVE-2026-110859 (GitPython before 3.2.0 contains an argument injection vulnerability in ...)
+ {DLA-4872-1}
- python-git 3.2.1-1
[trixie] - python-git <not-affected> (Incomplete fix for CVE-2026-78679 not applied)
NOTE: https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-23mf-xhv8-69c2
NOTE: Fixed by: https://github.com/gitpython-developers/GitPython/commit/8da65080849a56a2fc9f3e7817bbf0524e8397d5 (3.2.0)
NOTE: CVE exists because of an incomplete fix for CVE-2026-78679
CVE-2026-110858 (GitPython from 3.1.30 before 3.2.0 contains a remote code execution vu ...)
- {DSA-6594-1}
+ {DSA-6594-1 DLA-4872-1}
- python-git 3.2.1-1
NOTE: https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-f9j4-qggq-h239
NOTE: Fixed by: https://github.com/gitpython-developers/GitPython/commit/dafafff7e5438879d0167c17008342231f7af314 (3.2.0)
CVE-2026-110857 (GitPython before 3.2.0 contains a remote code execution vulnerability ...)
- {DSA-6594-1}
+ {DSA-6594-1 DLA-4872-1}
- python-git 3.2.1-1
NOTE: https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-w8jc-g24h-crhw
NOTE: Fixed by: https://github.com/gitpython-developers/GitPython/commit/9ad28cc4c7176d22cd6181d69805058a719dd03b (3.2.0)
CVE-2026-110856 (GitPython before 3.2.0 contains a regular expression denial of service ...)
- {DSA-6594-1}
+ {DSA-6594-1 DLA-4872-1}
- python-git 3.2.1-1
NOTE: https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-m64x-33q8-m5h7
NOTE: Fixed by: https://github.com/gitpython-developers/GitPython/commit/8290c98d35465a38090cdcc1b17be69967092a15 (3.2.0)
CVE-2026-110855 (GitPython before 3.2.0 contains an information disclosure vulnerabilit ...)
- {DSA-6594-1}
+ {DSA-6594-1 DLA-4872-1}
- python-git 3.2.1-1
NOTE: https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-fx3j-rwgx-fr94
NOTE: Fixed by: https://github.com/gitpython-developers/GitPython/commit/9349ff58ee00c9fb14d515c8e693f33b2144b238 (3.2.0)
@@ -43986,7 +44326,7 @@ CVE-2026-101888 (The Prime Mover plugin for WordPress before 2.2.1 contains a Zi
NOT-FOR-US: WordPress plugin
CVE-2026-101322 (In Eclipse BaSyx AAS Web UI versions v2-241220 through releases before ...)
NOT-FOR-US: Eclipse
-CVE-2026-100517 (Unauthenticated Insecure Direct Object References (IDOR) in Photo Revi ...)
+CVE-2026-100517 (Authorization Bypass Through User-Controlled Key vulnerability in Vill ...)
NOT-FOR-US: WordPress plugin or theme
CVE-2026-100514 (Unauthenticated Insecure Direct Object References (IDOR) in REST API L ...)
NOT-FOR-US: WordPress plugin or theme
@@ -50652,7 +50992,7 @@ CVE-2026-100690 (Hugo versions from v0.161.0 through v0.165.0 run Node.js tools
[bookworm] - hugo <not-affected> (Vulnerable code not present, only affects 0.161 and later)
NOTE: https://github.com/gohugoio/hugo/security/advisories/GHSA-x3mx-cm49-8m9c
CVE-2026-100689 (GitPython before 3.1.62 does not validate the `path` field read from a ...)
- {DSA-6594-1}
+ {DSA-6594-1 DLA-4872-1}
- python-git 3.1.62-1
NOTE: https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-59cr-6r3x-644w
NOTE: Fixed by: https://github.com/gitpython-developers/GitPython/commit/1ed0ebc2f2e74d979cdc367a4864a7731fdcc093 (3.1.62)
@@ -55996,7 +56336,7 @@ CVE-2026-71178 (Dell Secure Connect Gateway (SCG) Policy Manager, versions prior
NOT-FOR-US: Dell / EMC
CVE-2026-71177 (Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5. ...)
NOT-FOR-US: Dell / EMC
-CVE-2026-70125 (Microsoft Office Outlook Remote Code Execution Vulnerability)
+CVE-2026-70125 (Heap-based buffer overflow in Microsoft Office Outlook allows an unaut ...)
NOT-FOR-US: Microsoft
CVE-2026-6935 (IBM Concert 1.0.0 through 3.0.0 invokes operating system commands with ...)
NOT-FOR-US: IBM
@@ -75990,18 +76330,18 @@ CVE-2026-87821 (Lara Dashboard through 1.3.1 contains a server-side request forg
CVE-2026-87820 (CyberPanel versions 2.4.3 through 2.4.5 expose unauthenticated AI Scan ...)
NOT-FOR-US: CyberPanel
CVE-2026-87819 (GitPython before 3.1.60 contains a regular expression denial of servic ...)
- {DSA-6594-1}
+ {DSA-6594-1 DLA-4872-1}
- python-git 3.1.61-1
NOTE: https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-g5vv-9gxw-82hx
NOTE: Fixed by: https://github.com/gitpython-developers/GitPython/commit/751473a5f3221d6f989291cbebcc404353fd3ba8 (3.1.60)
NOTE: Followup for bug introduced by CVE fix: https://github.com/gitpython-developers/GitPython/commit/bc63b027e2fc737e2ec0222bfa764e1aa76a427f (3.1.61)
CVE-2026-87818 (GitPython 3.1.59 fails to restrict the --no-index option in the high-l ...)
- {DSA-6594-1}
+ {DSA-6594-1 DLA-4872-1}
- python-git 3.1.61-1
NOTE: https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-whh4-5q6c-9v3x
NOTE: Fixed by: https://github.com/gitpython-developers/GitPython/commit/09f2cf383a992d1af697364569e9f384748c1bd8 (3.1.60)
CVE-2026-87817 (GitPython before 3.1.60 fails to properly validate the git directory l ...)
- {DSA-6594-1}
+ {DSA-6594-1 DLA-4872-1}
- python-git 3.1.61-1
NOTE: https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-239g-whfq-7xj9
NOTE: Fixed by: https://github.com/gitpython-developers/GitPython/commit/c7cf4d13b1ed0a2e70f2a1f3c6b4fc6c2652cf0b (3.1.60)
@@ -95372,28 +95712,28 @@ CVE-2026-78680 (NLTK versions before 3.10.3 fail to use validated absolute paths
[bookworm] - nltk <postponed> (Minor issue)
NOTE: https://github.com/nltk/nltk/security/advisories/GHSA-6hwm-xvph-95vm
CVE-2026-78679 (GitPython before 3.1.59 contains an arbitrary file read vulnerability ...)
- {DSA-6594-1}
+ {DSA-6594-1 DLA-4872-1}
- python-git 3.1.61-1 (bug #1145672)
NOTE: https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-3wxw-xv34-2frg
NOTE: Fixed by: https://github.com/gitpython-developers/GitPython/commit/1b0d2d9b91575f7db44ef4ff58ac37fc9335e5f6 (3.1.59)
NOTE: When fixing this issue make sure to fix it completely to not open up CVE-2026-110859
CVE-2026-78678 (GitPython versions before 3.1.59 contain an incomplete denylist in the ...)
- {DSA-6594-1}
+ {DSA-6594-1 DLA-4872-1}
- python-git 3.1.61-1 (bug #1145672)
NOTE: https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-5xxx-qhh7-9287
NOTE: Fixed by: https://github.com/gitpython-developers/GitPython/commit/1b0d2d9b91575f7db44ef4ff58ac37fc9335e5f6 (3.1.59)
CVE-2026-78677 (GitPython before 3.1.59 omits --separate-git-dir from unsafe_git_clone ...)
- {DSA-6594-1}
+ {DSA-6594-1 DLA-4872-1}
- python-git 3.1.61-1 (bug #1145672)
NOTE: https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-8mcc-hrx5-hvxc
NOTE: Fixed by: https://github.com/gitpython-developers/GitPython/commit/b68afff45af0f49e79a3e2d2162018986b37ad5d (3.1.59)
CVE-2026-78676 (GitPython before 3.1.59 fails to safely re-serialize multi-line git-co ...)
- {DSA-6594-1}
+ {DSA-6594-1 DLA-4872-1}
- python-git 3.1.61-1 (bug #1145672)
NOTE: https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-284h-m62q-gf8w
NOTE: Fixed by: https://github.com/gitpython-developers/GitPython/commit/4b4e47fc1224e23b0c8ee7220a7192818f2e4abb (3.1.59)
CVE-2026-78675 (GitPython before 3.1.59 fails to disable merge_includes when parsing . ...)
- {DSA-6594-1}
+ {DSA-6594-1 DLA-4872-1}
- python-git 3.1.61-1 (bug #1145672)
NOTE: https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-7833-fr7j-v32q
NOTE: Fixed by: https://github.com/gitpython-developers/GitPython/commit/ef7568e3b317ce617eacda39b8b54dcdff8c3b5c (3.1.59)
@@ -99912,32 +100252,32 @@ CVE-2026-76224 (ArcadeDB before 26.8.1 (arcadedb-gremlin, affected <= 26.7.3) co
CVE-2026-76223 (ArcadeDB (com.arcadedb) versions 26.7.3 and earlier fail to enforce th ...)
NOT-FOR-US: ArcadeDB
CVE-2026-76222 (GitPython before 3.1.58 fails to validate submodule names from .gitmod ...)
- {DSA-6594-1}
+ {DSA-6594-1 DLA-4872-1}
- python-git 3.1.61-1 (bug #1144929)
NOTE: https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-hmq2-w58f-27jc
NOTE: Fixed by: https://github.com/gitpython-developers/GitPython/commit/e4b8e7d026ca6abb4cf604f8e77093432ce23c06 (3.1.58)
CVE-2026-76221 (GitPython before 3.1.58 contains a config-name injection vulnerability ...)
- {DSA-6594-1}
+ {DSA-6594-1 DLA-4872-1}
- python-git 3.1.61-1 (bug #1144929)
NOTE: https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-jm78-9fvv-mhgr
NOTE: Fixed by: https://github.com/gitpython-developers/GitPython/commit/a495ccd3b547ccd60b2187215823b72a9c0188bf (3.1.58)
CVE-2026-76220 (GitPython before 3.1.58 contains a command execution vulnerability in ...)
- {DSA-6594-1}
+ {DSA-6594-1 DLA-4872-1}
- python-git 3.1.61-1 (bug #1144929)
NOTE: https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-wvpp-8hx9-p66j
NOTE: Fixed by: https://github.com/gitpython-developers/GitPython/commit/96a888f4d782cb2f80452148e48e60ce4af6d541 (3.1.58)
CVE-2026-76219 (GitPython versions before 3.1.58 contain an arbitrary file overwrite v ...)
- {DSA-6594-1}
+ {DSA-6594-1 DLA-4872-1}
- python-git 3.1.61-1 (bug #1144929)
NOTE: https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-4gmw-gg2m-w46p
NOTE: Fixed by: https://github.com/gitpython-developers/GitPython/commit/9b5dcaf85da5946dbf69dcd53f9edba08f760b32 (3.1.58)
CVE-2026-76218 (GitPython before 3.1.58 contains a remote code execution vulnerability ...)
- {DSA-6594-1}
+ {DSA-6594-1 DLA-4872-1}
- python-git 3.1.61-1 (bug #1144929)
NOTE: https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-9rj7-rf2p-w77r
NOTE: Fixed by: https://github.com/gitpython-developers/GitPython/commit/d9ddb55bdc66ffe8c9932fe460e6b8c8211e47c7 (3.1.58)
CVE-2026-76217 (GitPython versions before 3.1.58 fail to validate options passed to gi ...)
- {DSA-6594-1}
+ {DSA-6594-1 DLA-4872-1}
- python-git 3.1.61-1 (bug #1144929)
NOTE: https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-hh9p-6wh2-4mfc
NOTE: Fixed by: https://github.com/gitpython-developers/GitPython/commit/f2550b65bf60ca087190981e2c7b6865e201f40c (3.1.58)
@@ -111144,38 +111484,38 @@ CVE-2026-73626 (JupyterLab versions >=4.6.0,<=4.6.1 and <=4.5.9 contain an allow
NOTE: https://github.com/jupyterlab/jupyterlab/security/advisories/GHSA-whvh-wf3x-g77j
NOTE: Fixed by: https://github.com/jupyterlab/jupyterlab/commit/be9303f5bcd5308eaeae953c5a3c903046682c2c (v4.5.10)
CVE-2026-73625 (GitPython versions before 3.1.54 contain a remote code execution vulne ...)
- {DSA-6594-1}
+ {DSA-6594-1 DLA-4872-1}
- python-git 3.1.61-1 (bug #1144344)
NOTE: https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-r9mr-m37c-5fr3
NOTE: Fixed by: https://github.com/gitpython-developers/GitPython/commit/e8d0fbf774d1f6baa3b481adfe48bd262e43b453 (3.1.54)
CVE-2026-73624 (GitPython versions before 3.1.54 contain an arbitrary file overwrite v ...)
- {DSA-6594-1}
+ {DSA-6594-1 DLA-4872-1}
- python-git 3.1.61-1 (bug #1144344)
NOTE: https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-fjr4-x663-mwxc
NOTE: Fixed by: https://github.com/gitpython-developers/GitPython/commit/1d51b891d7f236044a6aa17498ec682b63dad6e6 (3.1.54)
CVE-2026-73623 (GitPython before 3.1.54 contains an incomplete denylist in unsafe_git_ ...)
- {DSA-6594-1}
+ {DSA-6594-1 DLA-4872-1}
- python-git 3.1.61-1 (bug #1144344)
NOTE: https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-6p8h-3wgx-97gf
NOTE: Fixed by: https://github.com/gitpython-developers/GitPython/commit/ffcb5359e87619f4fe4a70a4aff5f08c5580ba97 (3.1.54)
CVE-2026-73622 (GitPython before 3.1.55 fails to disable environment variable expansio ...)
- {DSA-6594-1}
+ {DSA-6594-1 DLA-4872-1}
- python-git 3.1.61-1 (bug #1144344)
NOTE: https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-94p4-4cq8-9g67
NOTE: Distinct but releated to CVE-2026-67322
NOTE: Fixed by: https://github.com/gitpython-developers/GitPython/commit/863417457a0633db7ea5aed4fd01e0b291a41162 (3.1.55)
CVE-2026-73621 (GitPython before 3.1.56 contains an argument injection vulnerability i ...)
- {DSA-6594-1}
+ {DSA-6594-1 DLA-4872-1}
- python-git 3.1.61-1 (bug #1144344)
NOTE: https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-p538-c434-8v24
NOTE: Fixed by: https://github.com/gitpython-developers/GitPython/commit/38553b6fddc7f6a667cdb45a6762343a08fc72b2 (3.1.56)
CVE-2026-73620 (GitPython before 3.1.57 fails to guard git option forwarding in IndexF ...)
- {DSA-6594-1}
+ {DSA-6594-1 DLA-4872-1}
- python-git 3.1.61-1 (bug #1144344)
NOTE: https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-3f7w-8rr8-f37f
NOTE: Fixed by: https://github.com/gitpython-developers/GitPython/commit/3af0c2516c5e18c829da30338614688f6b69b49c (3.1.57)
CVE-2026-73619 (GitPython before 3.1.57 contains an incomplete denylist in the unsafe_ ...)
- {DSA-6594-1}
+ {DSA-6594-1 DLA-4872-1}
- python-git 3.1.61-1 (bug #1144344)
NOTE: https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-539m-9xh6-q6rr
NOTE: Fixed by: https://github.com/gitpython-developers/GitPython/commit/7a4f5dcb7bf3cbcbf6e438017efcdfe0bc0d36ca (3.1.57)
@@ -122893,7 +123233,7 @@ CVE-2026-69151 (Angular is a development platform for building mobile and deskto
CVE-2026-69149 (Angular is a development platform for building mobile and desktop web ...)
- angular.js <unfixed>
CVE-2026-69097 (GitPython before 3.1.53 fails to properly escape section names in git ...)
- {DSA-6594-1}
+ {DSA-6594-1 DLA-4872-1}
- python-git 3.1.61-1 (bug #1143602)
NOTE: https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-3rp5-jjmw-4wv2
NOTE: Fixed by: https://github.com/gitpython-developers/GitPython/commit/1ed1b924f4e2d2ee7bab296df77b978af21853f1 (3.1.53)
@@ -123590,28 +123930,28 @@ CVE-2026-67328 (@better-auth/sso versions before 1.6.21 contain multiple authent
CVE-2026-67327 (better-auth versions >= 1.1.3 and < 1.6.22 (and pre-release versions > ...)
NOT-FOR-US: Better Auth
CVE-2026-67326 (GitPython before 3.1.50 fails to validate newline characters in the se ...)
- {DSA-6594-1}
+ {DSA-6594-1 DLA-4872-1}
- python-git 3.1.50-1
NOTE: https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-mv93-w799-cj2w
NOTE: https://github.com/gitpython-developers/GitPython/commit/54538428f79b0c91ba52cda5229856a6edf7ac06 (3.1.50)
CVE-2026-67325 (GitPython before 3.1.51 contains an incomplete command injection block ...)
- {DSA-6594-1}
+ {DSA-6594-1 DLA-4872-1}
- python-git 3.1.61-1 (bug #1143454)
NOTE: https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-2f96-g7mh-g2hx
NOTE: Fixed by: https://github.com/gitpython-developers/GitPython/commit/181e8ede7543dbbdcee92756cea260f675316c63 (3.1.51)
NOTE: Fixed by: https://github.com/gitpython-developers/GitPython/commit/56806080c1348749b07daa4a2024ce47b3cad285 (3.1.51)
CVE-2026-67324 (GitPython 3.1.50 fails to recognize joined short-option forms such as ...)
- {DSA-6594-1}
+ {DSA-6594-1 DLA-4872-1}
- python-git 3.1.61-1 (bug #1143454)
NOTE: https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-v396-v7q4-x2qj
NOTE: Fixed by: https://github.com/gitpython-developers/GitPython/commit/2ab051697940144545a14d2f4a639c6409c3187f (3.1.51)
CVE-2026-67323 (GitPython before 3.1.51 fails to guard against dangerous Git options p ...)
- {DSA-6594-1}
+ {DSA-6594-1 DLA-4872-1}
- python-git 3.1.61-1 (bug #1143454)
NOTE: https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-956x-8gvw-wg5v
NOTE: Fixed by: https://github.com/gitpython-developers/GitPython/commit/701ce32fe5ba8cb622c0e0342a376a6beb47d738 (3.1.51)
CVE-2026-67322 (GitPython before 3.1.52 is vulnerable to environment-variable exfiltra ...)
- {DSA-6594-1}
+ {DSA-6594-1 DLA-4872-1}
- python-git 3.1.61-1 (bug #1143454)
NOTE: https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-rwj8-pgh3-r573
NOTE: Fixed by: https://github.com/gitpython-developers/GitPython/commit/8ac5a30519b6f4af85398b9b9d7064ff4d452da2 (3.1.52)
@@ -193949,14 +194289,14 @@ CVE-2026-44264 (Weblate is a web based localization tool. Prior to version 5.17.
CVE-2026-44263 (Weblate is a web based localization tool. Prior to version 5.17.1, the ...)
- weblate <itp> (bug #745661)
CVE-2026-44244 (GitPython is a python library used to interact with Git repositories. ...)
- {DSA-6594-1}
+ {DSA-6594-1 DLA-4872-1}
- python-git 3.1.50-1
NOTE: https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-v87r-6q3f-2j67
NOTE: https://github.com/gitpython-developers/GitPython/pull/2137
NOTE: https://github.com/gitpython-developers/GitPython/commit/c417af469f9aa3da8dfef78f996c0fb8c5d1f4c2 (3.1.49)
NOTE: https://github.com/gitpython-developers/GitPython/commit/8e24503b42c1d63dd98e8b2e6a2f655bdd0821e3 (3.1.49)
CVE-2026-44243 (GitPython is a python library used to interact with Git repositories. ...)
- {DSA-6594-1}
+ {DSA-6594-1 DLA-4872-1}
- python-git 3.1.50-1
NOTE: https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-7545-fcxq-7j24
NOTE: https://github.com/gitpython-developers/GitPython/pull/2134
@@ -200133,12 +200473,12 @@ CVE-2026-23773 (Dell Disk Library for Mainframe, version(s) DLm 8700/2700 contai
CVE-2026-21023 (Insufficient verification of data authenticity in PackageManagerServic ...)
NOT-FOR-US: Samsung Mobile
CVE-2026-42215 (GitPython is a python library used to interact with Git repositories. ...)
- {DSA-6594-1}
+ {DSA-6594-1 DLA-4872-1}
- python-git 3.1.50-1 (bug #1135349)
NOTE: https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-rpm5-65cw-6hj4
NOTE: Fixed by: https://github.com/gitpython-developers/GitPython/commit/0f68db0710f9125762fca5dbc2328593537ae923 (3.1.47)
CVE-2026-42284 (GitPython is a python library used to interact with Git repositories. ...)
- {DSA-6594-1}
+ {DSA-6594-1 DLA-4872-1}
- python-git 3.1.50-1 (bug #1135350)
NOTE: https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-x2qx-6953-8485
NOTE: Fixed by: https://github.com/gitpython-developers/GitPython/pull/2130
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e0d2e99d9eab277462ae512d9de11d350f81873c
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e0d2e99d9eab277462ae512d9de11d350f81873c
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261031/6e60db03/attachment-0001.htm>
More information about the debian-security-tracker-commits
mailing list