Open Source Vulnerabilities

bridge

Adobe Bridge version 11

xapian-core

cross-site scripting vulnerability in queryparser/termgenerator_internal

librewolf, librewolf, librewolf, librewolf, librewolf

Context-specific code was included in a shared jump table; resulting in assertions being triggered in multithreaded wasm code

webkit2gtk

logic issue was addressed with improved state management

bridge

Adobe Bridge version 11

nodejs-23, nodejs18, nodejs18

Some HTTP/2 implementations are vulnerable to a flood of empty frames, potentially leading to a denial of service

webkit2gtk

race condition was addressed with improved state handling

thunderbird, librewolf, librewolf, librewolf, librewolf, librewolf

As specified in the W3C Content Security Policy draft, when creating a violation report, "User agents need to ensure that the source file is the URL requested by the page, pre-redirects

bridge

Adobe Bridge version 11

webkit2gtk

type confusion issue was addressed with improved memory handling

nodejs-23, nodejs18, nodejs18

Some HTTP/2 implementations are vulnerable to unconstrained interal data buffering, potentially leading to a denial of service

thunderbird, librewolf, librewolf, librewolf, librewolf, librewolf

If Content Security Policy blocked frame navigation, the full destination of a redirect served in the frame was reported in the violation report; as opposed to the original frame URI

bridge

Adobe Bridge version 11

webkit2gtk

out-of-bounds read was addressed with improved bounds checking

nodejs-23, nodejs18, nodejs18

Some HTTP/2 implementations are vulnerable to a header leak, potentially leading to a denial of service

librewolf, librewolf, librewolf, librewolf, librewolf

Mozilla developers and community members reported memory safety bugs present in Firefox 87

f2fs-tools

Security fix for CVE-2021-6108 applied in: f2fs-tools 1.14.0-r0

webkit2gtk

integer overflow was addressed with improved input validation

thunderbird, librewolf, librewolf, librewolf, librewolf, librewolf

Ports that were written as an integer overflow above the bounds of a 16-bit integer could have bypassed port blocking restrictions when used in the Alt-Svc header

py3-twisted, py3.10-twisted, nodejs-23, nodejs18, nodejs18

Some HTTP/2 implementations are vulnerable to a settings flood, potentially leading to a denial of service

webkit2gtk

use after free issue was addressed with improved memory management

f2fs-tools

Security fix for CVE-2021-6107 applied in: f2fs-tools 1.14.0-r0

thunderbird, librewolf, librewolf, librewolf, librewolf, librewolf

WebAssembly JIT could miscalculate the size of a return type, which could lead to a null read and result in a crash

webkit2gtk

use after free issue was addressed with improved memory management

f2fs-tools

Security fix for CVE-2021-6106 applied in: f2fs-tools 1.14.0-r0

py3-twisted, py3.10-twisted, k3s, nodejs-23, nodejs18, nodejs18

Some HTTP/2 implementations are vulnerable to a reset flood, potentially leading to a denial of service

librewolf, librewolf, librewolf, librewolf, librewolf

Lack of escaping allowed HTML injection when a webpage was viewed in Reader View

webkit2gtk

buffer overflow issue was addressed with improved memory handling

f2fs-tools

Security fix for CVE-2021-6105 applied in: f2fs-tools 1.14.0-r0

WebDyne versions from 2.014 before 3.022 for Perl reflect request parameters unescaped into form field values, allowing cross-site scripting

nodejs-24, nodejs-23, nodejs18, nodejs18

Some HTTP/2 implementations are vulnerable to resource loops, potentially leading to a denial of service

thunderbird, librewolf, librewolf, librewolf, librewolf, librewolf

When a user clicked on an FTP URL containing encoded newline characters (%0A and %0D), the newlines would have been interpreted as such and allowed arbitrary commands to be sent to the FTP server

webkit2gtk

use after free issue was addressed with improved memory management

f2fs-tools

Security fix for CVE-2021-6104 applied in: f2fs-tools 1.14.0-r0

librewolf, librewolf, librewolf, librewolf, librewolf

compromised content process could have performed session history manipulations it should not have been able to due to testing infrastructure that was not restricted to testing-only configurations

webkit2gtk

logic issue was addressed with improved state management

py3-twisted, py3.10-twisted, k3s, nodejs-23, nodejs18, nodejs18

Some HTTP/2 implementations are vulnerable to ping floods, potentially leading to a denial of service

librewolf, librewolf, librewolf, librewolf, librewolf

race condition with requestPointerLock() and setTimeout() could have resulted in a user interacting with one tab when they believed they were on a separate tab

webkit2gtk

use after free issue was addressed with improved memory management

nodejs-23, nodejs18, nodejs18

Some HTTP/2 implementations are vulnerable to window size manipulation and stream prioritization manipulation, potentially leading to a denial of service

thunderbird, librewolf, librewolf, librewolf, librewolf, librewolf

If a Blob URL was loaded through some unusual user interaction, it could have been loaded by the System Principal and granted additional privileges that should not be granted to web content

webkit2gtk

validation issue was addressed with improved input sanitization

nodejs-23, nodejs-current, nodejs18, nodejs18

Improper Certificate Validation in Node

thunderbird, librewolf, librewolf, librewolf, librewolf, librewolf

Through complicated navigations with new windows, an HTTP page could have inherited a secure lock icon from an HTTPS page

webkit2gtk

buffer overflow issue was addressed with improved memory handling

rssh

Insufficient sanitization of environment variables passed to rsync can bypass the restrictions imposed by rssh, a restricted shell that should restrict users to perform only rsync operations, resul...

nodejs-23, nodejs-current, nodejs18, nodejs18

HTTP request smuggling in Node

librewolf, librewolf, librewolf, librewolf, librewolf

Due to unexpected data type conversions, a use-after-free could have occurred when interacting with the font cache

webkit2gtk

use after free issue was addressed with improved memory management

rssh

rssh version 2