Open Source Vulnerabilities

libssh2

integer overflow flaw, which could lead to an out of bounds write, was discovered in libssh2 before 1

thunderbird, librewolf, librewolf, librewolf, librewolf, librewolf

Mozilla developers reported memory safety bugs present in code shared between Firefox and Thunderbird

xrdp

xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP)

libssh2

integer overflow flaw which could lead to an out of bounds write was discovered in libssh2 before 1

nodejs-23, nodejs-current, nodejs18, nodejs18

Node

librewolf, librewolf, librewolf, librewolf, librewolf

Through a series of DOM manipulations, a message, over which the attacker had control of the text but not HTML or formatting, could be overlaid on top of another domain (with the new domain correct...

xrdp

xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP)

libssh2

In libssh2 before 1

librewolf, librewolf, librewolf, librewolf, librewolf

When network partitioning was enabled, e

xrdp

xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP)

jq

jv_dump_term function in jq 1

nodejs-23, nodejs18, nodejs18

package y18n before 3

xrdp

xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP)

librewolf, librewolf, librewolf, librewolf, librewolf

use-after-free vulnerability was found via testing, and traced to an out-of-date Cairo library

libssh2

In libssh2 v1

traceroute

In buc Traceroute 2

nodejs-23, nodejs-current, nodejs18, nodejs18

Node

xrdp

xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP)

thunderbird, librewolf, librewolf, librewolf, librewolf, librewolf

malicious webpage could have triggered a use-after-free, memory corruption, and a potentially exploitable crash

xrdp

xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP)

nodejs-23, nodejs-current, nodejs18, nodejs18

If the Node

librewolf, librewolf, librewolf, librewolf, librewolf

Mozilla developers reported memory safety bugs present in Firefox 91

xrdp

xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP)

gvfs

issue was discovered in GNOME gvfs 1

nodejs-23, nodejs-current, nodejs18, nodejs18

Node

thunderbird, librewolf, librewolf, librewolf, librewolf, librewolf

Mozilla developers reported memory safety bugs present in Firefox 91 and Firefox ESR 78

xrdp

xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP)

gvfs

issue was discovered in GNOME gvfs 1

thunderbird, librewolf, librewolf, librewolf, librewolf, librewolf

When delegating navigations to the operating system, Firefox would accept the `mk` scheme which might allow attackers to launch pages and execute scripts in Internet Explorer in unprivileged mode

nodejs-23, nodejs-current, nodejs18, nodejs18

flaw was found in c-ares library, where a missing input validation check of host names returned by DNS (Domain Name Servers) can lead to output of wrong hostnames which might potentially lead to Do...

xrdp

xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP)

gvfs

issue was discovered in GNOME gvfs 1

librewolf, librewolf, librewolf, librewolf, librewolf

Mixed-content checks were unable to analyze opaque origins which led to some mixed content being loaded

nodejs-23, nodejs18, nodejs18

`@npmcli/arborist`, the library that calculates dependency trees and manages the node_modules folder hierarchy for the npm command line interface, aims to guarantee that package dependency contract...

xrdp

xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP)

gvfs

daemon/gvfsdaemon

librewolf, librewolf, librewolf, librewolf, librewolf

Firefox for Android allowed navigations through the `intent://` protocol, which could be used to cause crashes and UI spoofs

nodejs-23, nodejs18, nodejs18

`@npmcli/arborist`, the library that calculates dependency trees and manages the `node_modules` folder hierarchy for the npm command line interface, aims to guarantee that package dependency contra...

xrdp

xrdp is an open source remote desktop protocol (RDP) server

thunderbird, librewolf, librewolf, librewolf, librewolf, librewolf

Firefox incorrectly accepted a newline in a HTTP/3 header, interpretting it as two separate headers

nodejs-23, nodejs18, nodejs18

npm package "tar" (aka node-tar) before versions 4

xrdp

xrdp is an open source remote desktop protocol server

librewolf, librewolf, librewolf, librewolf, librewolf

Mozilla developers and community members reported memory safety bugs present in Firefox 90

nodejs-23, nodejs18, nodejs18

npm package "tar" (aka node-tar) before versions 4

thunderbird, librewolf, librewolf, librewolf, librewolf, librewolf

Mozilla developers reported memory safety bugs present in Firefox 90 and Firefox ESR 78

nodejs-23, nodejs18, nodejs18

npm package "tar" (aka node-tar) before versions 4

thunderbird, librewolf, librewolf, librewolf, librewolf, librewolf

Firefox incorrectly treated an inline list-item element as a block element, resulting in an out of bounds read or memory corruption, and a potentially exploitable crash

nodejs-23, nodejs-current, nodejs18, nodejs18

parse function in llhttp < 2

thunderbird, librewolf, librewolf, librewolf, librewolf, librewolf

After requesting multiple permissions, and closing the first permission panel, subsequent permission panels will be displayed in a different position but still record a click in the default locatio...

nodejs-23, nodejs-current, nodejs18, nodejs18

parser in accepts requests with a space (SP) right after the header name before the colon