Open Source Vulnerabilities

libetpan

LibEtPan through 1

librewolf, librewolf, librewolf, librewolf, librewolf

VideoStreamEncoder may have been freed in a race condition with VideoBroadcaster::AddOrUpdateSink, resulting in a use-after-free, memory corruption, and a potentially exploitable crash

keepalived

In Keepalived through 2

minidlna

ReadyMedia (aka MiniDLNA) before versions 1

webkit2gtk

logic issue was addressed with improved state management

spice

Multiple buffer overflow vulnerabilities were found in the QUIC image decoding process of the SPICE remote display system, before spice-0

librewolf, librewolf, librewolf, librewolf, librewolf

When "%2F" was present in a manifest URL, Firefox's AppCache behavior may have become confused and allowed a manifest to be served from a subdirectory

webkit2gtk

Multiple memory corruption issues were addressed with improved memory handling

minidlna

DNS rebinding issue in ReadyMedia (formerly MiniDLNA) before 1

librewolf, librewolf, librewolf, librewolf, librewolf

Mozilla developers and community members reported memory safety bugs present in Firefox 78 and Firefox ESR 78

webkit2gtk

logic issue was addressed with improved state management

gtk-vnc

Multiple integer overflows in the (1) vnc_connection_server_message and (2) vnc_color_map_set functions in gtk-vnc before 0

librewolf, librewolf, librewolf, librewolf, librewolf

code for downloading files did not properly take care of special characters, which led to an attacker being able to cut off the file ending at an earlier position, leading to a different file type ...

jansson

issue was discovered in Jansson through 2

fig2dev

denial of service vulnerabiity exists in fig2dev through 3

webkit2gtk

memory corruption issue was addressed with improved state management

gtk-vnc

gtk-vnc before 0

zoneminder

ZoneMinder is a free, open source Closed-circuit television software application for Linux which supports IP, USB and Analog cameras

librewolf, librewolf, librewolf, librewolf, librewolf

Firefox could be made to load attacker-supplied DLL files from the installation directory

fig2dev

double-free vulnerability exists in fig2dev through 3

webkit2gtk

buffer overflow issue was addressed with improved memory handling

librewolf, librewolf, librewolf, librewolf, librewolf

JIT optimizations involving the Javascript arguments object could confuse later optimizations

zoneminder

ZoneMinder is a free, open source Closed-circuit television software application

webkit2gtk

Multiple memory corruption issues were addressed with improved memory handling

librewolf, librewolf, librewolf, librewolf, librewolf

redirected HTTP request which is observed or modified through a web extension could bypass existing CORS checks, leading to potential disclosure of cross-origin information

openstack-ironic-2026.1

zoneminder

ZoneMinder is a free, open source Closed-circuit television software application

openstack-ironic-2026.1

openstack-ironic-2026.1

openstack-ironic-2026.1

lout

Lout 3

webkit2gtk

Multiple memory corruption issues were addressed with improved memory handling

librewolf, librewolf, librewolf, librewolf, librewolf

When in an endless loop, a website specifying a custom cursor using CSS could make it look like the user is interacting with the user interface, when they are not

zoneminder

ZoneMinder is a free, open source Closed-circuit television software application

perl-dbi

issue was discovered in the DBI module through 1

lout

Lout 3

webkit2gtk

This issue was addressed with improved iframe sandbox enforcement

librewolf, librewolf, librewolf, librewolf, librewolf

iframe sandbox element with the allow-popups flag could be bypassed when using noopener links

zoneminder

ZoneMinder is a free, open source Closed-circuit television software application The file parameter is vulnerable to a cross site scripting vulnerability (XSS) by backing out of the current "tr" "t...

perl-dbi

buffer overflow was found in perl-DBI < 1

webkit2gtk

issue existed in the drawing of web page elements

librewolf, librewolf, librewolf, librewolf, librewolf

By observing the stack trace for JavaScript errors in web workers, it was possible to leak the result of a cross-origin redirect

zoneminder

ZoneMinder before 1

perl-dbi

untrusted pointer dereference flaw was found in Perl-DBI < 1

ytnef

In ytnef 1

webkit2gtk

Multiple memory corruption issues were addressed with improved memory handling

librewolf, librewolf, librewolf, librewolf, librewolf

Inappropriate implementation in WebRTC in Google Chrome prior to 84

zoneminder

Stored XSS in the Filters page (Name field) in ZoneMinder 1

taglib

TagLib::Ogg::FLAC::File::scan function in oggflacfile

sphinx

issue was discovered on CDATA 72408A, 9008A, 9016A, 92408A, 92416A, 9288, 97016, 97024P, 97028P, 97042P, 97084P, 97168P, FD1002S, FD1104, FD1104B, FD1104S, FD1104SN, FD1108S, FD1204S-R2, FD1204SN, ...