Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
e0d2e99d by security tracker role at 2026-10-31T07:13:27+00:00
automatic update
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,3 +1,335 @@
+CVE-2026-95673
+ REJECTED
+CVE-2026-94361 (The Payable Payment Gateway for WooCommerce WordPress plugin
before 1. ...)
+ TODO: check
+CVE-2026-92294 (The Spectra Gutenberg Blocks \u2013 Website Builder for the
Block Edit ...)
+ TODO: check
+CVE-2026-90960 (The Seraphinite Accelerator plugin for WordPress is vulnerable
to Sens ...)
+ TODO: check
+CVE-2026-89270 (The Popup Builder \u2013 Create highly converting, mobile
friendly mar ...)
+ TODO: check
+CVE-2026-88942 (The Product Filter for WooCommerce by WBW plugin for WordPress
is vuln ...)
+ TODO: check
+CVE-2026-82214 (The Quick Event Manager WordPress plugin before 9.19 does not
verify t ...)
+ TODO: check
+CVE-2026-7005 (WIT SynApps Runtime through 1.4.11 contains a browser-mediated
cross-o ...)
+ TODO: check
+CVE-2026-78403 (Stack-based buffer overflow and missing authorization
vulnerability in ...)
+ TODO: check
+CVE-2026-78402 (Stack-based buffer overflow and out-of-bounds write
vulnerability in T ...)
+ TODO: check
+CVE-2026-77152 (Improper Authorization vulnerability in Drupal Field
Collection for Dr ...)
+ TODO: check
+CVE-2026-63414 (Shopify App is a Rails engine for building Shopify
applications. From ...)
+ TODO: check
+CVE-2026-63410 (secp256k1-native is a native C secp256k1 implementation for
Ruby. In a ...)
+ TODO: check
+CVE-2026-63402 (i18next is an internationalization framework for JavaScript.
Prior to ...)
+ TODO: check
+CVE-2026-63401 (Coop is an open source review and moderation tool from ROOST.
Prior to ...)
+ TODO: check
+CVE-2026-63400 (Coop is an open source review and moderation tool from ROOST.
Prior to ...)
+ TODO: check
+CVE-2026-63399 (Coop is an open source review and moderation tool from ROOST.
Prior to ...)
+ TODO: check
+CVE-2026-63398 (Coop is an open source review and moderation tool from ROOST.
Prior to ...)
+ TODO: check
+CVE-2026-63396 (Coop is an open source review and moderation tool from ROOST.
Prior to ...)
+ TODO: check
+CVE-2026-63393 (OpenSearch SQL supports querying OpenSearch data using SQL and
Piped P ...)
+ TODO: check
+CVE-2026-63378 (TAKO AI Agent for Okta is a local-first AI agent that helps
Okta admin ...)
+ TODO: check
+CVE-2026-63377 (TAKO AI Agent for Okta is a local-first AI agent that helps
Okta admin ...)
+ TODO: check
+CVE-2026-63346 (Refitter is a tool for generating a C# REST API client using
the Refit ...)
+ TODO: check
+CVE-2026-63345 (Refitter is a tool for generating a C# REST API client using
the Refit ...)
+ TODO: check
+CVE-2026-63344 (Refitter is a tool for generating a C# REST API client using
the Refit ...)
+ TODO: check
+CVE-2026-63341 (Aedes is an MQTT broker that can run on any stream server.
Prior to 1. ...)
+ TODO: check
+CVE-2026-63339 (IXP Manager is a full-stack web application for managing
Internet Exch ...)
+ TODO: check
+CVE-2026-63338 (IXP Manager is a full-stack web application for managing
Internet Exch ...)
+ TODO: check
+CVE-2026-63224 (OpenRemote is an open-source internet-of-things platform.
Prior to 1.2 ...)
+ TODO: check
+CVE-2026-63201 (Netopeer2 is a server for implementing network configuration
managemen ...)
+ TODO: check
+CVE-2026-63184 (Refitter is a tool for generating a C# REST API client using
the Refit ...)
+ TODO: check
+CVE-2026-63182 (LightSAML implements SAML 2.0 data model classes, XML
serialization an ...)
+ TODO: check
+CVE-2026-63121 (Kubewarden policies is a collection of WebAssembly policies
for securi ...)
+ TODO: check
+CVE-2026-63115 (ActivityPub is a multi-tenant ActivityPub server for Ghost,
built with ...)
+ TODO: check
+CVE-2026-62991 (Shopper is a Headless e-commerce Admin Panel. Prior to 2.10.1,
the cus ...)
+ TODO: check
+CVE-2026-62990 (Shopper is a Headless e-commerce Admin Panel. In versions from
2.0.0 p ...)
+ TODO: check
+CVE-2026-62989 (Shopper is a Headless e-commerce Admin Panel. Prior to 2.10.0,
the Var ...)
+ TODO: check
+CVE-2026-62979 (jack lets users share media libraries through their
Radarr/Sonarr stac ...)
+ TODO: check
+CVE-2026-62968 (Dream Displays provides in-game screens for streaming videos
in Minecr ...)
+ TODO: check
+CVE-2026-62967 (ZTNET is a ZeroTier web UI for private controllers with
multiuser and ...)
+ TODO: check
+CVE-2026-62966 (ESPAsyncWebServer is an asynchronous HTTP and WebSocket server
library ...)
+ TODO: check
+CVE-2026-62965 (SABnzbd is an open source automated Usenet download tool.
Prior to 5.1 ...)
+ TODO: check
+CVE-2026-62958 (libriscv is a RISC-V sandbox and emulator. Prior to 1.18, a
crafted EL ...)
+ TODO: check
+CVE-2026-62864 (Ring is a Clojure web applications library inspired by
Python's WSGI a ...)
+ TODO: check
+CVE-2026-62863 (MoLing is a computer-use and browser-use based MCP server.
Prior to 0. ...)
+ TODO: check
+CVE-2026-62860 (Picsou is a self-hosted personal finance dashboard. In the
affected lo ...)
+ TODO: check
+CVE-2026-62853 (ThingLinks is an enterprise IoT platform. Prior to 1.4.0, the
`/groovy ...)
+ TODO: check
+CVE-2026-62849 (ThingLinks is an enterprise IoT platform. Prior to 1.4.0, an
unauthent ...)
+ TODO: check
+CVE-2026-62848 (Metalama is a Roslyn-based open-source patterns and
architecture toolk ...)
+ TODO: check
+CVE-2026-62847 (Metalama is a Roslyn-based open-source patterns and
architecture toolk ...)
+ TODO: check
+CVE-2026-62347 (Element Call is a native Matrix video conferencing
application. From 0 ...)
+ TODO: check
+CVE-2026-62337 (SNARK Verifier is a generic (S)NARK verifier. Prior to 0.2.5,
the Halo ...)
+ TODO: check
+CVE-2026-62335 (OpenVM is a performant and modular zkVM framework built for
customizat ...)
+ TODO: check
+CVE-2026-62334 (OpenVM is a performant and modular zkVM framework built for
customizat ...)
+ TODO: check
+CVE-2026-62333 (OpenVM is a performant and modular zkVM framework built for
customizat ...)
+ TODO: check
+CVE-2026-62331 (praktor is a multi-agent Claude Code orchestrator with
Telegram input ...)
+ TODO: check
+CVE-2026-62302 (MyTube is a self-hosted downloader and player for several
video websit ...)
+ TODO: check
+CVE-2026-62301 (MyTube is a self-hosted downloader and player for several
video websit ...)
+ TODO: check
+CVE-2026-62300 (Filecoin Pin is an IPFS Pinning Service API implementation
that pins t ...)
+ TODO: check
+CVE-2026-62297 (ag-psd is a JavaScript library for reading and writing
Photoshop Docum ...)
+ TODO: check
+CVE-2026-62284 (OSAC operator is a Kubernetes operator. In the affected
revision ident ...)
+ TODO: check
+CVE-2026-62277 (LubeLogger is a self-hosted, open-source, web-based vehicle
maintenanc ...)
+ TODO: check
+CVE-2026-62254 (LibreDWG is a free C library to read and write DWG files.
Prior to 0.1 ...)
+ TODO: check
+CVE-2026-62250 (LibreDWG is a free C library to read and write DWG files.
Prior to 0.1 ...)
+ TODO: check
+CVE-2026-61850 (Kargo manages and automates the promotion of software
artifacts. From ...)
+ TODO: check
+CVE-2026-61725 (sevenz-rust2 is a Rust-native 7z compressor and
`decompress`or. Prior ...)
+ TODO: check
+CVE-2026-61694 (go-xrpl is a Go implementation of the XRP Ledger protocol. In
versions ...)
+ TODO: check
+CVE-2026-61620 (HoneySQL turns Clojure data structures into SQL. From 2.0.0
until 2.7. ...)
+ TODO: check
+CVE-2026-61618 (SNARK Verifier is a generic (S)NARK verifier. Prior to 0.2.5,
KZG accu ...)
+ TODO: check
+CVE-2026-59993 (Picotls is a TLS protocol library that allows users select
different c ...)
+ TODO: check
+CVE-2026-58412 (Filecoin Pin is an IPFS Pinning Service API implementation
that pins t ...)
+ TODO: check
+CVE-2026-55614 (uhttpd is a small HTTP server. In unpatched repository
snapshots, `cli ...)
+ TODO: check
+CVE-2026-55613 (uhttpd is a small HTTP server. In unpatched repository
snapshots, `uh_ ...)
+ TODO: check
+CVE-2026-55612 (uhttpd is a small HTTP server. In unpatched repository
snapshots, `cli ...)
+ TODO: check
+CVE-2026-55598 (PinePods is a complete, self-hosted podcast management system
written ...)
+ TODO: check
+CVE-2026-55493 (HotCRP is conference review software. Starting with 2.101, the
`cmt:` ...)
+ TODO: check
+CVE-2026-55147 (LORIS (Longitudinal Online Research and Imaging System) is a
self-host ...)
+ TODO: check
+CVE-2026-55146 (LORIS (Longitudinal Online Research and Imaging System) is a
self-host ...)
+ TODO: check
+CVE-2026-55098 (Arc is an open, SQL-native time-series database for telemetry.
Prior t ...)
+ TODO: check
+CVE-2026-54610 (LibreDWG is a free C library to read and write DWG files.
Prior to 0.1 ...)
+ TODO: check
+CVE-2026-40573 (NovumOS is a custom 32-bit operating system written in Zig and
x86 Ass ...)
+ TODO: check
+CVE-2026-16760 (In Trail of Bits fickling through 0.1.12, the
_process_import() method ...)
+ TODO: check
+CVE-2026-120040 (The Mail logging & Catcher plugin for WordPress is vulnerable
to Sensi ...)
+ TODO: check
+CVE-2026-120019 (The W3 Total Cache plugin for WordPress is vulnerable to
Stored Cross- ...)
+ TODO: check
+CVE-2026-11396 (The Product Filter for WooCommerce by WBW plugin for WordPress
is vuln ...)
+ TODO: check
+CVE-2026-119980 (The UsersWP \u2013 Front-end login form, User Registration,
User Profi ...)
+ TODO: check
+CVE-2026-119977 (WordPress Core is vulnerable to Remote Code Execution in
versions 4.7 ...)
+ TODO: check
+CVE-2026-119730 (Maxthon Browser for Android before 7.5.8.103 contains an
address bar s ...)
+ TODO: check
+CVE-2026-119343 (Stirling-PDF is a locally hosted web application that
facilitates vari ...)
+ TODO: check
+CVE-2026-119342 (Stirling-PDF is a locally hosted web application that
facilitates vari ...)
+ TODO: check
+CVE-2026-119341 (Tesseract is an open source OCR engine. Prior to 5.5.4,
ReadAdaptedCla ...)
+ TODO: check
+CVE-2026-119340 (Tesseract is an open source OCR engine. Prior to 5.5.4,
GENERIC_2D_ARR ...)
+ TODO: check
+CVE-2026-119339 (Tesseract is an open source OCR engine. Prior to 5.5.4,
WeightMatrix:: ...)
+ TODO: check
+CVE-2026-119338 (Tesseract is an open source OCR engine. From 5.4.0 until
5.5.4, Append ...)
+ TODO: check
+CVE-2026-119337 (RAGFlow is an open-source RAG (Retrieval-Augmented
Generation) engine. ...)
+ TODO: check
+CVE-2026-119336 (Pi-hole is a DNS sinkhole that protects devices from unwanted
content ...)
+ TODO: check
+CVE-2026-119335 (Pi-hole is a DNS sinkhole that protects devices from unwanted
content ...)
+ TODO: check
+CVE-2026-119334 (Pi-hole is a DNS sinkhole that protects devices from unwanted
content ...)
+ TODO: check
+CVE-2026-119333 (draw.io Desktop is the official Electron build of draw.io.
Prior to 31 ...)
+ TODO: check
+CVE-2026-119332 (Ladybird is a truly independent web browser. Prior to
209579c96473c75b ...)
+ TODO: check
+CVE-2026-119331 (Ladybird is a truly independent web browser. Prior to the
c0d68bddf3e3 ...)
+ TODO: check
+CVE-2026-119330 (Immich is a high-performance self-hosted photo and video
management so ...)
+ TODO: check
+CVE-2026-119329 (Immich is a high-performance self-hosted photo and video
management so ...)
+ TODO: check
+CVE-2026-119328 (Immich is a high-performance self-hosted photo and video
management so ...)
+ TODO: check
+CVE-2026-119166 (The Welcart e-Commerce plugin for WordPress is vulnerable to
Insecure ...)
+ TODO: check
+CVE-2026-119163 (The FunnelKit Automations \u2013 Email Marketing Automation
and CRM fo ...)
+ TODO: check
+CVE-2026-119162 (The User Submitted Posts \u2013 Enable Users to Submit Posts
from the ...)
+ TODO: check
+CVE-2026-119089 (The ThirstyAffiliates \u2013 Affiliate Links, Link Branding,
Link Trac ...)
+ TODO: check
+CVE-2026-119065 (The Shipping Zones by Drawing for WooCommerce plugin for
WordPress is ...)
+ TODO: check
+CVE-2026-118938 (In Trail of Bits fickling through 0.1.12, a pickle
STACK_GLOBAL operan ...)
+ TODO: check
+CVE-2026-118638 (The Mapster WP Maps WordPress plugin before 2.0.6 does not
perform any ...)
+ TODO: check
+CVE-2026-118629 (The All-in-One Video Gallery WordPress plugin before 5.0.0
does not c ...)
+ TODO: check
+CVE-2026-118438 (The Firelight Lightbox WordPress plugin before 2.3.24 does
not properl ...)
+ TODO: check
+CVE-2026-118437 (The BuddyForms WordPress plugin before 2.10.1 does not
properly verify ...)
+ TODO: check
+CVE-2026-118185 (The Security Optimizer WordPress plugin before 1.6.9 does
not limit t ...)
+ TODO: check
+CVE-2026-118184 (The Premium Packages WordPress plugin before 7.2.2 does not
prevent u ...)
+ TODO: check
+CVE-2026-118070 (The Welcart e-Commerce plugin for WordPress is vulnerable to
Stored Cr ...)
+ TODO: check
+CVE-2026-118043 (The Bulk Media Register WordPress plugin before 2.01 does not
properly ...)
+ TODO: check
+CVE-2026-117666 (Improper Validation of Certificate with Host Mismatch
vulnerability in ...)
+ TODO: check
+CVE-2026-117656 (Acceptance of Extraneous Untrusted Data With Trusted Data
vulnerabilit ...)
+ TODO: check
+CVE-2026-117645 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
+ TODO: check
+CVE-2026-116755 (Improper Neutralization of Special Elements used in a Command
('Comman ...)
+ TODO: check
+CVE-2026-116563 (The Photo Gallery, Sliders, Proofing and Themes \u2013
NextGEN Gallery ...)
+ TODO: check
+CVE-2026-116557 (The WP Booking System - Booking Calendar plugin for WordPress
is vulne ...)
+ TODO: check
+CVE-2026-116548 (The VikRentCar Car Rental Management System plugin for
WordPress is vu ...)
+ TODO: check
+CVE-2026-116546 (The WP Job Portal \u2013 AI-Powered Recruitment System for
Company or ...)
+ TODO: check
+CVE-2026-116522 (The Relevanssi \u2013 A Better Search plugin for WordPress is
vulnerab ...)
+ TODO: check
+CVE-2026-116520 (The PPWP \u2013 Password Protect Pages plugin for WordPress
is vulnera ...)
+ TODO: check
+CVE-2026-116252 (pgAdmin 4's materialized view refresh passed the target
database's nam ...)
+ TODO: check
+CVE-2026-116251 (pgAdmin 4 did not invalidate a user's existing sessions when
their pas ...)
+ TODO: check
+CVE-2026-116250 (In server mode pgAdmin 4 validates a path a user gives for a
file in t ...)
+ TODO: check
+CVE-2026-116249 (In server mode pgAdmin 4 resolves a server's password file,
SSL certif ...)
+ TODO: check
+CVE-2026-116248 (In pgAdmin 4 server mode only administrators are meant to
share a serv ...)
+ TODO: check
+CVE-2026-116247 (When a server in pgAdmin 4 had no password file, client
certificate or ...)
+ TODO: check
+CVE-2026-116246 (To pass a server's password to psql and to the utilities
pgAdmin 4 run ...)
+ TODO: check
+CVE-2026-116245 (libpq looks a connection service up in the service file of
the operati ...)
+ TODO: check
+CVE-2026-116244 (When a pgAdmin 4 connection was not meant to use a Kerberos
user's del ...)
+ TODO: check
+CVE-2026-116243 (pgAdmin 4 runs pg_dump, pg_restore, pg_dumpall and psql from
the binar ...)
+ TODO: check
+CVE-2026-116242 (pgAdmin 4 opens SSH tunnels with the sshtunnel library but
gave it nei ...)
+ TODO: check
+CVE-2026-116241 (pgAdmin 4's Import/Export Data tool wraps a user's query
export in a p ...)
+ TODO: check
+CVE-2026-116240 (In server mode pgAdmin 4 validates a path into the user's
storage dire ...)
+ TODO: check
+CVE-2026-116239 (In server mode pgAdmin 4 keeps an account per authentication
source, s ...)
+ TODO: check
+CVE-2026-116238 (In server mode pgAdmin 4 locks an internal account after
MAX_LOGIN_ATT ...)
+ TODO: check
+CVE-2026-115840 (The VikRentCar Car Rental Management System plugin for
WordPress is vu ...)
+ TODO: check
+CVE-2026-115830 (In Secret Server versions earlier than 12.3.1, a user under
certain co ...)
+ TODO: check
+CVE-2026-115829 (In Secret Server versions earlier than 12.3.1, a user could
bypass the ...)
+ TODO: check
+CVE-2026-115828 (In Secret Server versions earlier than 12.3.1, Secret Server
did not a ...)
+ TODO: check
+CVE-2026-111578 (The PDF Invoices & Packing Slips for WooCommerce WordPress
plugin from ...)
+ TODO: check
+CVE-2026-111477
+ REJECTED
+CVE-2026-111254 (The W3 Total Cache plugin for WordPress is vulnerable to
Stored Cross- ...)
+ TODO: check
+CVE-2026-111109 (The Webmention plugin for WordPress is vulnerable to Stored
Cross-Site ...)
+ TODO: check
+CVE-2026-110808 (The Essential Addons for Elementor WordPress plugin before
6.8.8 does ...)
+ TODO: check
+CVE-2026-110251 (The Photo Reviews for WooCommerce plugin for WordPress is
vulnerable t ...)
+ TODO: check
+CVE-2026-110176 (The File Force Download module for Drupal 7 implements
hook_file_downl ...)
+ TODO: check
+CVE-2026-110042 (The Payment Forms for Paystack WordPress plugin before 4.0.6
does not ...)
+ TODO: check
+CVE-2026-109997 (The Ninja Forms \u2013 Contact Form Builder with Calculators,
Quizzes, ...)
+ TODO: check
+CVE-2026-109386 (The Hustle \u2013 Email Marketing, Lead Generation, Optins,
Popups plu ...)
+ TODO: check
+CVE-2026-109234 (The Meow Lightbox plugin for WordPress is vulnerable to
Stored Cross-S ...)
+ TODO: check
+CVE-2026-109220 (The PDF Invoice for WooCommerce + Drag and Drop Template
Builder plugi ...)
+ TODO: check
+CVE-2026-109217 (The PDF Invoices & Packing Slips for WooCommerce plugin for
WordPress ...)
+ TODO: check
+CVE-2026-109213
+ REJECTED
+CVE-2026-107765 (The Discussion Board \u2013 WordPress Forum Plugin plugin for
WordPres ...)
+ TODO: check
+CVE-2026-107750 (The PDF Invoices & Packing Slips for WooCommerce plugin for
WordPress ...)
+ TODO: check
+CVE-2026-107653 (The SureCart \u2013 Ecommerce Made Easy For Selling Physical
Products, ...)
+ TODO: check
+CVE-2026-101326 (The The Ninja Forms \u2013 Contact Form Builder with
Calculators, Quiz ...)
+ TODO: check
+CVE-2026-100155 (The The Ninja Forms \u2013 Contact Form Builder with
Calculators, Quiz ...)
+ TODO: check
CVE-2026-XXXX [GHSA-6w3p-4pq7-j3mp: UEFI Secure Boot bypass via stack overflow
vulnerability in signed fwupd EFI application]
- fwupd-efi 1:1.9-1
NOTE:
https://github.com/fwupd/fwupd-efi/security/advisories/GHSA-6w3p-4pq7-j3mp
@@ -5212,24 +5544,31 @@ CVE-2026-13162 (An OS command vulnerability exists in
CoreTec productthat allows
CVE-2026-12887 (In affected versions of Octopus Server, a user with permission
to uplo ...)
NOT-FOR-US: Octopus Deploy
CVE-2026-118180 (When logging in to a Matrix account, Thunderbird used the
homeserver a ...)
+ {DSA-6598-1}
- thunderbird 1:153.6.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-118180
CVE-2026-118179 (Clicking a news: or snews: link that referenced a message-ID
made Thun ...)
+ {DSA-6598-1}
- thunderbird 1:153.6.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-118179
CVE-2026-118178 (A remote RSS feed could use the itunes:new-feed-url or
newLocation ele ...)
+ {DSA-6598-1}
- thunderbird 1:153.6.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-118178
CVE-2026-118177 (When looking for calendars in a directory on a server, during
account ...)
+ {DSA-6598-1}
- thunderbird 1:153.6.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-118177
CVE-2026-118176 (Thunderbird's check that prevents mailbox: URLs from
accessing files o ...)
+ {DSA-6598-1}
- thunderbird 1:153.6.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-118176
CVE-2026-118175 (When replying to, forwarding, or editing a crafted email
message as ne ...)
+ {DSA-6598-1}
- thunderbird 1:153.6.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-118175
CVE-2026-118174 (When a message containing an OpenPGP key attachment was
displayed, Thu ...)
+ {DSA-6598-1}
- thunderbird 1:153.6.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-118174
CVE-2026-118173 (MISP Guard, a proxy that enforces security policies on MISP
feed data, ...)
@@ -5313,7 +5652,7 @@ CVE-2026-118005 (Use-after-free in the WebRTC: Signaling
component. This vulnera
- firefox 159.0-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-118005
CVE-2026-118004 (Incorrect boundary conditions in the CSS Transitions and
Animations co ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5321,7 +5660,7 @@ CVE-2026-118004 (Incorrect boundary conditions in the CSS
Transitions and Animat
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-118004
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-118004
CVE-2026-118003 (Information disclosure in the Networking: DNS component. This
vulnerab ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5329,7 +5668,7 @@ CVE-2026-118003 (Information disclosure in the
Networking: DNS component. This v
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-118003
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-118003
CVE-2026-118002 (Information disclosure due to race condition in the
Networking compone ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5337,7 +5676,7 @@ CVE-2026-118002 (Information disclosure due to race
condition in the Networking
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-118002
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-118002
CVE-2026-118000 (Information disclosure in the Networking: HTTP component.
This vulnera ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5345,7 +5684,7 @@ CVE-2026-118000 (Information disclosure in the
Networking: HTTP component. This
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-118000
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-118000
CVE-2026-117999 (Race condition in the IPC component. This vulnerability was
fixed in F ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5353,7 +5692,7 @@ CVE-2026-117999 (Race condition in the IPC component.
This vulnerability was fix
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117999
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117999
CVE-2026-117998 (Mitigation bypass in the DOM: Push Subscriptions component.
This vulne ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5361,7 +5700,7 @@ CVE-2026-117998 (Mitigation bypass in the DOM: Push
Subscriptions component. Thi
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117998
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117998
CVE-2026-117997 (Sandbox escape due to use-after-free in the Widget component.
This vul ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5369,7 +5708,7 @@ CVE-2026-117997 (Sandbox escape due to use-after-free in
the Widget component. T
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117997
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117997
CVE-2026-117996 (Incorrect boundary conditions in the WebRTC component. This
vulnerabil ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5377,7 +5716,7 @@ CVE-2026-117996 (Incorrect boundary conditions in the
WebRTC component. This vul
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117996
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117996
CVE-2026-117995 (Privilege escalation in the DOM: UI Events & Focus Handling
component. ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5385,7 +5724,7 @@ CVE-2026-117995 (Privilege escalation in the DOM: UI
Events & Focus Handling com
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117995
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117995
CVE-2026-117994 (Use-after-free in the JavaScript: GC component. This
vulnerability was ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5393,7 +5732,7 @@ CVE-2026-117994 (Use-after-free in the JavaScript: GC
component. This vulnerabil
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117994
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117994
CVE-2026-117993 (Integer overflow in the Graphics: Text component. This
vulnerability w ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5401,7 +5740,7 @@ CVE-2026-117993 (Integer overflow in the Graphics: Text
component. This vulnerab
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117993
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117993
CVE-2026-117992 (Information disclosure in the CSS Parsing and Computation
component. T ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5409,7 +5748,7 @@ CVE-2026-117992 (Information disclosure in the CSS
Parsing and Computation compo
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117992
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117992
CVE-2026-117991 (Incorrect boundary conditions in the Layout: Text and Fonts
component. ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5417,7 +5756,7 @@ CVE-2026-117991 (Incorrect boundary conditions in the
Layout: Text and Fonts com
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117991
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117991
CVE-2026-117990 (Sandbox escape due to incorrect boundary conditions in the
Graphics: W ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5425,7 +5764,7 @@ CVE-2026-117990 (Sandbox escape due to incorrect boundary
conditions in the Grap
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117990
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117990
CVE-2026-117989 (Use-after-free in the Graphics component. This vulnerability
was fixed ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5433,7 +5772,7 @@ CVE-2026-117989 (Use-after-free in the Graphics
component. This vulnerability wa
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117989
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117989
CVE-2026-117988 (Sandbox escape due to incorrect boundary conditions in the
Graphics: C ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5441,7 +5780,7 @@ CVE-2026-117988 (Sandbox escape due to incorrect boundary
conditions in the Grap
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117988
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117988
CVE-2026-117987 (Use-after-free in the Graphics component. This vulnerability
was fixed ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5449,7 +5788,7 @@ CVE-2026-117987 (Use-after-free in the Graphics
component. This vulnerability wa
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117987
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117987
CVE-2026-117986 (Use-after-free in the Graphics component. This vulnerability
was fixed ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5457,7 +5796,7 @@ CVE-2026-117986 (Use-after-free in the Graphics
component. This vulnerability wa
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117986
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117986
CVE-2026-117985 (Sandbox escape due to use-after-free in the Graphics
component. This v ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5465,7 +5804,7 @@ CVE-2026-117985 (Sandbox escape due to use-after-free in
the Graphics component.
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117985
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117985
CVE-2026-117984 (Incorrect boundary conditions in the Layout: Scrolling and
Overflow co ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5473,7 +5812,7 @@ CVE-2026-117984 (Incorrect boundary conditions in the
Layout: Scrolling and Over
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117984
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117984
CVE-2026-117983 (Use-after-free in the Graphics component. This vulnerability
was fixed ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5481,7 +5820,7 @@ CVE-2026-117983 (Use-after-free in the Graphics
component. This vulnerability wa
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117983
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117983
CVE-2026-117982 (Invalid pointer in the JavaScript Engine: JIT component. This
vulnerab ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5489,7 +5828,7 @@ CVE-2026-117982 (Invalid pointer in the JavaScript
Engine: JIT component. This v
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117982
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117982
CVE-2026-117981 (Privilege escalation in the Toolkit component. This
vulnerability was ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5497,7 +5836,7 @@ CVE-2026-117981 (Privilege escalation in the Toolkit
component. This vulnerabili
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117981
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117981
CVE-2026-117980 (Use-after-free in the Graphics component. This vulnerability
was fixed ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5505,7 +5844,7 @@ CVE-2026-117980 (Use-after-free in the Graphics
component. This vulnerability wa
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117980
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117980
CVE-2026-117979 (Incorrect boundary conditions in the Graphics: WebRender
component. Th ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5513,7 +5852,7 @@ CVE-2026-117979 (Incorrect boundary conditions in the
Graphics: WebRender compon
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117979
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117979
CVE-2026-117978 (Incorrect boundary conditions in the Graphics component. This
vulnerab ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5521,7 +5860,7 @@ CVE-2026-117978 (Incorrect boundary conditions in the
Graphics component. This v
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117978
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117978
CVE-2026-117977 (Other issue in the Console component. This vulnerability was
fixed in ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5529,7 +5868,7 @@ CVE-2026-117977 (Other issue in the Console component.
This vulnerability was fi
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117977
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117977
CVE-2026-117976 (Site isolation issue in the DOM: Navigation component. This
vulnerabil ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5537,7 +5876,7 @@ CVE-2026-117976 (Site isolation issue in the DOM:
Navigation component. This vul
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117976
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117976
CVE-2026-117975 (Sandbox escape due to invalid pointer in the Graphics:
WebRender compo ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5545,7 +5884,7 @@ CVE-2026-117975 (Sandbox escape due to invalid pointer in
the Graphics: WebRende
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117975
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117975
CVE-2026-117974 (Use-after-free in the XML component. This vulnerability was
fixed in F ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5553,7 +5892,7 @@ CVE-2026-117974 (Use-after-free in the XML component.
This vulnerability was fix
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117974
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117974
CVE-2026-117973 (Use-after-free in the Networking: DNS component. This
vulnerability wa ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5561,7 +5900,7 @@ CVE-2026-117973 (Use-after-free in the Networking: DNS
component. This vulnerabi
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117973
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117973
CVE-2026-117972 (Use-after-free in the Graphics component. This vulnerability
was fixed ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5569,7 +5908,7 @@ CVE-2026-117972 (Use-after-free in the Graphics
component. This vulnerability wa
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117972
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117972
CVE-2026-117971 (Sandbox escape due to use-after-free in the Print Preview
component. T ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5577,7 +5916,7 @@ CVE-2026-117971 (Sandbox escape due to use-after-free in
the Print Preview compo
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117971
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117971
CVE-2026-117970 (Race condition in the Disability Access APIs component. This
vulnerabi ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5585,7 +5924,7 @@ CVE-2026-117970 (Race condition in the Disability Access
APIs component. This vu
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117970
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117970
CVE-2026-117969 (Invalid pointer in the JavaScript Engine: JIT component. This
vulnerab ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5593,7 +5932,7 @@ CVE-2026-117969 (Invalid pointer in the JavaScript
Engine: JIT component. This v
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117969
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117969
CVE-2026-117968 (Use-after-free in the DOM: Core & HTML component. This
vulnerability w ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5601,7 +5940,7 @@ CVE-2026-117968 (Use-after-free in the DOM: Core & HTML
component. This vulnerab
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117968
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117968
CVE-2026-117967 (Mitigation bypass in the DOM: Security component. This
vulnerability w ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5609,7 +5948,7 @@ CVE-2026-117967 (Mitigation bypass in the DOM: Security
component. This vulnerab
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117967
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117967
CVE-2026-117966 (Site isolation issue in the Networking: HTTP component. This
vulnerabi ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5617,7 +5956,7 @@ CVE-2026-117966 (Site isolation issue in the Networking:
HTTP component. This vu
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117966
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117966
CVE-2026-117965 (Same-origin policy bypass in the Address Bar component. This
vulnerabi ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5625,7 +5964,7 @@ CVE-2026-117965 (Same-origin policy bypass in the Address
Bar component. This vu
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117965
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117965
CVE-2026-117964 (Use-after-free in the Panning and Zooming component. This
vulnerabilit ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5633,7 +5972,7 @@ CVE-2026-117964 (Use-after-free in the Panning and
Zooming component. This vulne
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117964
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117964
CVE-2026-117963 (Incorrect boundary conditions in the DOM: Service Workers
component. T ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5641,7 +5980,7 @@ CVE-2026-117963 (Incorrect boundary conditions in the
DOM: Service Workers compo
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117963
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117963
CVE-2026-117962 (Sandbox escape due to incorrect boundary conditions in the
Storage: Qu ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5649,7 +5988,7 @@ CVE-2026-117962 (Sandbox escape due to incorrect boundary
conditions in the Stor
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117962
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117962
CVE-2026-117961 (Incorrect boundary conditions in the Layout: Text and Fonts
component. ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5657,7 +5996,7 @@ CVE-2026-117961 (Incorrect boundary conditions in the
Layout: Text and Fonts com
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117961
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117961
CVE-2026-117960 (Spoofing issue in the DOM: Core & HTML component. This
vulnerability w ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5665,7 +6004,7 @@ CVE-2026-117960 (Spoofing issue in the DOM: Core & HTML
component. This vulnerab
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117960
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117960
CVE-2026-117959 (Site isolation issue in the DOM: Service Workers component.
This vulne ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5673,7 +6012,7 @@ CVE-2026-117959 (Site isolation issue in the DOM: Service
Workers component. Thi
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117959
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117959
CVE-2026-117958 (Site isolation issue in the Networking: HTTP component. This
vulnerabi ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5681,7 +6020,7 @@ CVE-2026-117958 (Site isolation issue in the Networking:
HTTP component. This vu
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117958
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117958
CVE-2026-117957 (Cryptographic issue in the WebRTC: Networking component. This
vulnerab ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5689,7 +6028,7 @@ CVE-2026-117957 (Cryptographic issue in the WebRTC:
Networking component. This v
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117957
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117957
CVE-2026-117956 (Invalid pointer in the Nimbus Desktop Client component. This
vulnerabi ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5697,7 +6036,7 @@ CVE-2026-117956 (Invalid pointer in the Nimbus Desktop
Client component. This vu
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117956
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117956
CVE-2026-117955 (JIT miscompilation in the JavaScript: WebAssembly component.
This vuln ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5705,7 +6044,7 @@ CVE-2026-117955 (JIT miscompilation in the JavaScript:
WebAssembly component. Th
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117955
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117955
CVE-2026-117954 (Use-after-free in the Layout: Positioned component. This
vulnerability ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5713,7 +6052,7 @@ CVE-2026-117954 (Use-after-free in the Layout: Positioned
component. This vulner
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117954
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117954
CVE-2026-117953 (Use-after-free in the DOM: Core & HTML component. This
vulnerability w ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5721,7 +6060,7 @@ CVE-2026-117953 (Use-after-free in the DOM: Core & HTML
component. This vulnerab
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117953
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117953
CVE-2026-117952 (Uninitialized memory in the Networking component. This
vulnerability w ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5729,7 +6068,7 @@ CVE-2026-117952 (Uninitialized memory in the Networking
component. This vulnerab
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117952
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117952
CVE-2026-117951 (Use-after-free in the DOM: Core & HTML component. This
vulnerability w ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5737,7 +6076,7 @@ CVE-2026-117951 (Use-after-free in the DOM: Core & HTML
component. This vulnerab
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117951
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117951
CVE-2026-117950 (Incorrect boundary conditions in the DOM: Core & HTML
component. This ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5745,7 +6084,7 @@ CVE-2026-117950 (Incorrect boundary conditions in the
DOM: Core & HTML component
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117950
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117950
CVE-2026-117949 (Use-after-free in the DOM: Core & HTML component. This
vulnerability w ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5753,7 +6092,7 @@ CVE-2026-117949 (Use-after-free in the DOM: Core & HTML
component. This vulnerab
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117949
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117949
CVE-2026-117948 (Use-after-free in the SVG component. This vulnerability was
fixed in F ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5761,7 +6100,7 @@ CVE-2026-117948 (Use-after-free in the SVG component.
This vulnerability was fix
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117948
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117948
CVE-2026-117947 (Use-after-free in the XML component. This vulnerability was
fixed in F ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5769,7 +6108,7 @@ CVE-2026-117947 (Use-after-free in the XML component.
This vulnerability was fix
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117947
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117947
CVE-2026-117946 (Incorrect boundary conditions in the JavaScript Engine
component. This ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5777,7 +6116,7 @@ CVE-2026-117946 (Incorrect boundary conditions in the
JavaScript Engine componen
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117946
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117946
CVE-2026-117945 (Incorrect boundary conditions in the XML component. This
vulnerability ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5785,7 +6124,7 @@ CVE-2026-117945 (Incorrect boundary conditions in the XML
component. This vulner
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117945
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117945
CVE-2026-117944 (Use-after-free in the Layout component. This vulnerability
was fixed i ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5793,7 +6132,7 @@ CVE-2026-117944 (Use-after-free in the Layout component.
This vulnerability was
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117944
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117944
CVE-2026-117943 (Use-after-free in the DOM: Core & HTML component. This
vulnerability w ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5801,7 +6140,7 @@ CVE-2026-117943 (Use-after-free in the DOM: Core & HTML
component. This vulnerab
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117943
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117943
CVE-2026-117942 (Incorrect boundary conditions in the JavaScript Engine: JIT
component. ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5809,7 +6148,7 @@ CVE-2026-117942 (Incorrect boundary conditions in the
JavaScript Engine: JIT com
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117942
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117942
CVE-2026-117941 (Use-after-free in the DOM: CSS Object Model component. This
vulnerabil ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5817,7 +6156,7 @@ CVE-2026-117941 (Use-after-free in the DOM: CSS Object
Model component. This vul
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117941
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117941
CVE-2026-117940 (Use-after-free in the DOM: Core & HTML component. This
vulnerability w ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5825,7 +6164,7 @@ CVE-2026-117940 (Use-after-free in the DOM: Core & HTML
component. This vulnerab
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117940
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117940
CVE-2026-117939 (Use-after-free in the XML component. This vulnerability was
fixed in F ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5833,7 +6172,7 @@ CVE-2026-117939 (Use-after-free in the XML component.
This vulnerability was fix
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117939
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117939
CVE-2026-117938 (Use-after-free in the Layout component. This vulnerability
was fixed i ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5841,7 +6180,7 @@ CVE-2026-117938 (Use-after-free in the Layout component.
This vulnerability was
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117938
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117938
CVE-2026-117937 (Invalid pointer in the JavaScript Engine component. This
vulnerability ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5849,7 +6188,7 @@ CVE-2026-117937 (Invalid pointer in the JavaScript Engine
component. This vulner
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117937
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117937
CVE-2026-117936 (Use-after-free in the DOM: Core & HTML component. This
vulnerability w ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5857,7 +6196,7 @@ CVE-2026-117936 (Use-after-free in the DOM: Core & HTML
component. This vulnerab
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117936
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117936
CVE-2026-117935 (Use-after-free in the DOM: Bindings (WebIDL) component. This
vulnerabi ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5865,7 +6204,7 @@ CVE-2026-117935 (Use-after-free in the DOM: Bindings
(WebIDL) component. This vu
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117935
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117935
CVE-2026-117934 (Use-after-free in the Layout component. This vulnerability
was fixed i ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5873,7 +6212,7 @@ CVE-2026-117934 (Use-after-free in the Layout component.
This vulnerability was
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117934
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117934
CVE-2026-117933 (Frame poisoning in the CSS Parsing and Computation component.
This vul ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5881,7 +6220,7 @@ CVE-2026-117933 (Frame poisoning in the CSS Parsing and
Computation component. T
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117933
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117933
CVE-2026-117932 (Use-after-free in the DOM: Core & HTML component. This
vulnerability w ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5889,7 +6228,7 @@ CVE-2026-117932 (Use-after-free in the DOM: Core & HTML
component. This vulnerab
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117932
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117932
CVE-2026-117931 (Use-after-free in the DOM: Events component. This
vulnerability was fi ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5897,7 +6236,7 @@ CVE-2026-117931 (Use-after-free in the DOM: Events
component. This vulnerability
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117931
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117931
CVE-2026-117930 (Use-after-free in the DOM: Bindings (WebIDL) component. This
vulnerabi ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5905,7 +6244,7 @@ CVE-2026-117930 (Use-after-free in the DOM: Bindings
(WebIDL) component. This vu
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117930
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117930
CVE-2026-117929 (Use-after-free in the DOM: Core & HTML component. This
vulnerability w ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5913,7 +6252,7 @@ CVE-2026-117929 (Use-after-free in the DOM: Core & HTML
component. This vulnerab
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117929
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117929
CVE-2026-117928 (Same-origin policy bypass in the CSS Parsing and Computation
component ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5921,7 +6260,7 @@ CVE-2026-117928 (Same-origin policy bypass in the CSS
Parsing and Computation co
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117928
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117928
CVE-2026-117927 (Use-after-free in the SVG component. This vulnerability was
fixed in F ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5929,7 +6268,7 @@ CVE-2026-117927 (Use-after-free in the SVG component.
This vulnerability was fix
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117927
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117927
CVE-2026-117926 (Incorrect boundary conditions in the SVG component. This
vulnerability ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5937,7 +6276,7 @@ CVE-2026-117926 (Incorrect boundary conditions in the SVG
component. This vulner
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117926
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117926
CVE-2026-117925 (Use-after-free in the DOM: Core & HTML component. This
vulnerability w ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5945,7 +6284,7 @@ CVE-2026-117925 (Use-after-free in the DOM: Core & HTML
component. This vulnerab
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117925
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117925
CVE-2026-117924 (Use-after-free in the XSLT component. This vulnerability was
fixed in ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5953,7 +6292,7 @@ CVE-2026-117924 (Use-after-free in the XSLT component.
This vulnerability was fi
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117924
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117924
CVE-2026-117923 (Use-after-free in the Audio/Video component. This
vulnerability was fi ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5961,7 +6300,7 @@ CVE-2026-117923 (Use-after-free in the Audio/Video
component. This vulnerability
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117923
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117923
CVE-2026-117922 (Use-after-free in the Networking: WebSockets component. This
vulnerabi ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5969,7 +6308,7 @@ CVE-2026-117922 (Use-after-free in the Networking:
WebSockets component. This vu
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117922
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117922
CVE-2026-117921 (Use-after-free in the CSS Parsing and Computation component.
This vuln ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5977,7 +6316,7 @@ CVE-2026-117921 (Use-after-free in the CSS Parsing and
Computation component. Th
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117921
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117921
CVE-2026-117920 (Use-after-free in the DOM: HTML Parser component. This
vulnerability w ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5985,7 +6324,7 @@ CVE-2026-117920 (Use-after-free in the DOM: HTML Parser
component. This vulnerab
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117920
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117920
CVE-2026-117919 (Use-after-free in the DOM: Core & HTML component. This
vulnerability w ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -5993,7 +6332,7 @@ CVE-2026-117919 (Use-after-free in the DOM: Core & HTML
component. This vulnerab
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117919
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117919
CVE-2026-117918 (Use-after-free in the Graphics: Canvas2D component. This
vulnerability ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6001,7 +6340,7 @@ CVE-2026-117918 (Use-after-free in the Graphics: Canvas2D
component. This vulner
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117918
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117918
CVE-2026-117917 (Invalid pointer in the Graphics: WebRender component. This
vulnerabili ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6009,7 +6348,7 @@ CVE-2026-117917 (Invalid pointer in the Graphics:
WebRender component. This vuln
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117917
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117917
CVE-2026-117916 (Use-after-free in the XSLT component. This vulnerability was
fixed in ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6017,7 +6356,7 @@ CVE-2026-117916 (Use-after-free in the XSLT component.
This vulnerability was fi
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117916
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117916
CVE-2026-117915 (Incorrect boundary conditions in the Layout: Block and Inline
componen ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6025,7 +6364,7 @@ CVE-2026-117915 (Incorrect boundary conditions in the
Layout: Block and Inline c
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117915
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117915
CVE-2026-117914 (Use-after-free in the SVG component. This vulnerability was
fixed in F ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6033,7 +6372,7 @@ CVE-2026-117914 (Use-after-free in the SVG component.
This vulnerability was fix
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117914
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117914
CVE-2026-117913 (Use-after-free in the SVG component. This vulnerability was
fixed in F ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6041,7 +6380,7 @@ CVE-2026-117913 (Use-after-free in the SVG component.
This vulnerability was fix
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117913
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117913
CVE-2026-117912 (Same-origin policy bypass in the CSS Parsing and Computation
component ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6049,7 +6388,7 @@ CVE-2026-117912 (Same-origin policy bypass in the CSS
Parsing and Computation co
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117912
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117912
CVE-2026-117911 (Use-after-free in the Audio/Video: Playback component. This
vulnerabil ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6057,7 +6396,7 @@ CVE-2026-117911 (Use-after-free in the Audio/Video:
Playback component. This vul
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117911
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117911
CVE-2026-117910 (Invalid pointer in the JavaScript Engine component. This
vulnerability ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6065,7 +6404,7 @@ CVE-2026-117910 (Invalid pointer in the JavaScript Engine
component. This vulner
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117910
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117910
CVE-2026-117909 (Use-after-free in the JavaScript: GC component. This
vulnerability was ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6073,7 +6412,7 @@ CVE-2026-117909 (Use-after-free in the JavaScript: GC
component. This vulnerabil
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117909
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117909
CVE-2026-117908 (Use-after-free in the Graphics: ImageLib component. This
vulnerability ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6081,7 +6420,7 @@ CVE-2026-117908 (Use-after-free in the Graphics: ImageLib
component. This vulner
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117908
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117908
CVE-2026-117907 (Use-after-free in the Networking component. This
vulnerability was fix ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6089,7 +6428,7 @@ CVE-2026-117907 (Use-after-free in the Networking
component. This vulnerability
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117907
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117907
CVE-2026-117906 (Use-after-free in the CSS Parsing and Computation component.
This vuln ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6097,7 +6436,7 @@ CVE-2026-117906 (Use-after-free in the CSS Parsing and
Computation component. Th
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117906
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117906
CVE-2026-117905 (Use-after-free in the Audio/Video: Playback component. This
vulnerabil ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6105,7 +6444,7 @@ CVE-2026-117905 (Use-after-free in the Audio/Video:
Playback component. This vul
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117905
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117905
CVE-2026-117904 (Use-after-free in the JavaScript: GC component. This
vulnerability was ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6113,7 +6452,7 @@ CVE-2026-117904 (Use-after-free in the JavaScript: GC
component. This vulnerabil
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117904
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117904
CVE-2026-117903 (Use-after-free in the Audio/Video component. This
vulnerability was fi ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6121,7 +6460,7 @@ CVE-2026-117903 (Use-after-free in the Audio/Video
component. This vulnerability
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117903
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117903
CVE-2026-117902 (Use-after-free in the Layout: Text and Fonts component. This
vulnerabi ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6129,7 +6468,7 @@ CVE-2026-117902 (Use-after-free in the Layout: Text and
Fonts component. This vu
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117902
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117902
CVE-2026-117901 (Use-after-free in the DOM: Core & HTML component. This
vulnerability w ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6137,7 +6476,7 @@ CVE-2026-117901 (Use-after-free in the DOM: Core & HTML
component. This vulnerab
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117901
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117901
CVE-2026-117900 (Use-after-free in the DOM: Editor component. This
vulnerability was fi ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6145,7 +6484,7 @@ CVE-2026-117900 (Use-after-free in the DOM: Editor
component. This vulnerability
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117900
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117900
CVE-2026-117899 (Use-after-free in the Networking: HTTP component. This
vulnerability w ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6153,7 +6492,7 @@ CVE-2026-117899 (Use-after-free in the Networking: HTTP
component. This vulnerab
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117899
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117899
CVE-2026-117898 (Use-after-free in the JavaScript Engine: JIT component. This
vulnerabi ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6161,7 +6500,7 @@ CVE-2026-117898 (Use-after-free in the JavaScript Engine:
JIT component. This vu
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117898
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117898
CVE-2026-117897 (Incorrect boundary conditions in the Layout: Tables
component. This vu ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6169,7 +6508,7 @@ CVE-2026-117897 (Incorrect boundary conditions in the
Layout: Tables component.
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117897
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117897
CVE-2026-117896 (Use-after-free in the DOM: Core & HTML component. This
vulnerability w ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6177,7 +6516,7 @@ CVE-2026-117896 (Use-after-free in the DOM: Core & HTML
component. This vulnerab
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117896
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117896
CVE-2026-117895 (Use-after-free in the DOM: Core & HTML component. This
vulnerability w ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6185,7 +6524,7 @@ CVE-2026-117895 (Use-after-free in the DOM: Core & HTML
component. This vulnerab
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117895
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117895
CVE-2026-117894 (Incorrect boundary conditions in the WebRTC: Signaling
component. This ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6193,7 +6532,7 @@ CVE-2026-117894 (Incorrect boundary conditions in the
WebRTC: Signaling componen
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117894
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117894
CVE-2026-117893 (Incorrect boundary conditions in the Security: PSM component.
This vul ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6201,7 +6540,7 @@ CVE-2026-117893 (Incorrect boundary conditions in the
Security: PSM component. T
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117893
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117893
CVE-2026-117892 (Privilege escalation due to use-after-free in the WebRTC:
Networking c ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6209,7 +6548,7 @@ CVE-2026-117892 (Privilege escalation due to
use-after-free in the WebRTC: Netwo
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117892
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117892
CVE-2026-117891 (Use-after-free in the JavaScript Engine: JIT component. This
vulnerabi ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6217,7 +6556,7 @@ CVE-2026-117891 (Use-after-free in the JavaScript Engine:
JIT component. This vu
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117891
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117891
CVE-2026-117890 (JIT miscompilation in the JavaScript Engine: JIT component.
This vulne ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6225,7 +6564,7 @@ CVE-2026-117890 (JIT miscompilation in the JavaScript
Engine: JIT component. Thi
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117890
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117890
CVE-2026-117889 (Incorrect boundary conditions in the JavaScript Engine
component. This ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6233,7 +6572,7 @@ CVE-2026-117889 (Incorrect boundary conditions in the
JavaScript Engine componen
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117889
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117889
CVE-2026-117888 (Uninitialized memory in the Graphics: Canvas2D component.
This vulnera ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6241,7 +6580,7 @@ CVE-2026-117888 (Uninitialized memory in the Graphics:
Canvas2D component. This
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117888
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117888
CVE-2026-117887 (Use-after-free in the DOM: Core & HTML component. This
vulnerability w ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6249,7 +6588,7 @@ CVE-2026-117887 (Use-after-free in the DOM: Core & HTML
component. This vulnerab
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117887
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117887
CVE-2026-117886 (Incorrect boundary conditions in the Graphics: Text
component. This vu ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6257,7 +6596,7 @@ CVE-2026-117886 (Incorrect boundary conditions in the
Graphics: Text component.
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117886
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117886
CVE-2026-117885 (Use-after-free in the Layout: Grid component. This
vulnerability was f ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6265,7 +6604,7 @@ CVE-2026-117885 (Use-after-free in the Layout: Grid
component. This vulnerabilit
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117885
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117885
CVE-2026-117884 (Use-after-free in the Networking component. This
vulnerability was fix ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6273,7 +6612,7 @@ CVE-2026-117884 (Use-after-free in the Networking
component. This vulnerability
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117884
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117884
CVE-2026-117883 (Use-after-free in the DOM: HTML Parser component. This
vulnerability w ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6281,7 +6620,7 @@ CVE-2026-117883 (Use-after-free in the DOM: HTML Parser
component. This vulnerab
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117883
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117883
CVE-2026-117882 (Use-after-free in the Layout component. This vulnerability
was fixed i ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6289,7 +6628,7 @@ CVE-2026-117882 (Use-after-free in the Layout component.
This vulnerability was
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117882
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117882
CVE-2026-117881 (Use-after-free in the DOM: Core & HTML component. This
vulnerability w ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6297,7 +6636,7 @@ CVE-2026-117881 (Use-after-free in the DOM: Core & HTML
component. This vulnerab
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117881
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117881
CVE-2026-117880 (Use-after-free in the XML component. This vulnerability was
fixed in F ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6305,7 +6644,7 @@ CVE-2026-117880 (Use-after-free in the XML component.
This vulnerability was fix
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117880
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117880
CVE-2026-117879 (Incorrect boundary conditions in the Layout: Tables
component. This vu ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6313,7 +6652,7 @@ CVE-2026-117879 (Incorrect boundary conditions in the
Layout: Tables component.
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117879
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117879
CVE-2026-117878 (Other issue, use-after-free in the Storage: IndexedDB
component. This ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6321,7 +6660,7 @@ CVE-2026-117878 (Other issue, use-after-free in the
Storage: IndexedDB component
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117878
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117878
CVE-2026-117877 (Use-after-free in the Layout: Text and Fonts component. This
vulnerabi ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6329,7 +6668,7 @@ CVE-2026-117877 (Use-after-free in the Layout: Text and
Fonts component. This vu
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117877
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117877
CVE-2026-117876 (Use-after-free in the Layout: Text and Fonts component. This
vulnerabi ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6337,7 +6676,7 @@ CVE-2026-117876 (Use-after-free in the Layout: Text and
Fonts component. This vu
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117876
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117876
CVE-2026-117875 (Use-after-free in the Layout: Scrolling and Overflow
component. This v ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6345,7 +6684,7 @@ CVE-2026-117875 (Use-after-free in the Layout: Scrolling
and Overflow component.
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117875
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117875
CVE-2026-117874 (Use-after-free in the Internationalization component. This
vulnerabili ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6353,7 +6692,7 @@ CVE-2026-117874 (Use-after-free in the
Internationalization component. This vuln
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117874
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117874
CVE-2026-117873 (Incorrect boundary conditions in the Audio/Video: Playback
component. ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6361,7 +6700,7 @@ CVE-2026-117873 (Incorrect boundary conditions in the
Audio/Video: Playback comp
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117873
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117873
CVE-2026-117872 (Use-after-free in the JavaScript: Standard Library component.
This vul ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6369,7 +6708,7 @@ CVE-2026-117872 (Use-after-free in the JavaScript:
Standard Library component. T
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117872
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117872
CVE-2026-117871 (Invalid pointer in the Graphics component. This vulnerability
was fixe ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6377,7 +6716,7 @@ CVE-2026-117871 (Invalid pointer in the Graphics
component. This vulnerability w
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117871
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117871
CVE-2026-117870 (Use-after-free in the JavaScript Engine component. This
vulnerability ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6385,7 +6724,7 @@ CVE-2026-117870 (Use-after-free in the JavaScript Engine
component. This vulnera
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117870
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117870
CVE-2026-117869 (Use-after-free in the DOM: Core & HTML component. This
vulnerability w ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6393,7 +6732,7 @@ CVE-2026-117869 (Use-after-free in the DOM: Core & HTML
component. This vulnerab
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117869
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117869
CVE-2026-117868 (Sandbox escape in the DOM: Networking component. This
vulnerability wa ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6401,7 +6740,7 @@ CVE-2026-117868 (Sandbox escape in the DOM: Networking
component. This vulnerabi
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117868
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117868
CVE-2026-117867 (Use-after-free in the Layout component. This vulnerability
was fixed i ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6409,7 +6748,7 @@ CVE-2026-117867 (Use-after-free in the Layout component.
This vulnerability was
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117867
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117867
CVE-2026-117866 (Privilege escalation due to use-after-free in the Graphics:
Canvas2D c ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6417,7 +6756,7 @@ CVE-2026-117866 (Privilege escalation due to
use-after-free in the Graphics: Can
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117866
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117866
CVE-2026-117865 (Use-after-free in the JavaScript: GC component. This
vulnerability was ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6425,7 +6764,7 @@ CVE-2026-117865 (Use-after-free in the JavaScript: GC
component. This vulnerabil
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117865
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117865
CVE-2026-117864 (Sandbox escape in the Form Manager component. This
vulnerability was f ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6433,7 +6772,7 @@ CVE-2026-117864 (Sandbox escape in the Form Manager
component. This vulnerabilit
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117864
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117864
CVE-2026-117863 (Information disclosure due to uninitialized memory in the
Audio/Video ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6441,7 +6780,7 @@ CVE-2026-117863 (Information disclosure due to
uninitialized memory in the Audio
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117863
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117863
CVE-2026-117862 (Privilege escalation due to incorrect boundary conditions in
the Netwo ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6449,7 +6788,7 @@ CVE-2026-117862 (Privilege escalation due to incorrect
boundary conditions in th
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117862
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117862
CVE-2026-117861 (Sandbox escape in the DOM: Navigation component. This
vulnerability wa ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -6457,7 +6796,7 @@ CVE-2026-117861 (Sandbox escape in the DOM: Navigation
component. This vulnerabi
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117861
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117861
CVE-2026-117860 (Same-origin policy bypass in the DOM: Navigation component.
This vulne ...)
- {DSA-6590-1 DLA-4866-1}
+ {DSA-6598-1 DSA-6590-1 DLA-4866-1}
- firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
@@ -22016,7 +22355,7 @@ CVE-2026-98433 (In the Linux kernel, the following
vulnerability has been resolv
[bookworm] - linux 6.1.190-1
NOTE:
https://git.kernel.org/linus/0a416ee20bcccddf91ca5b63696a23b9d11d73aa (7.3-rc4)
CVE-2026-114145 (GitPython is a python library used to interact with Git
repositories. ...)
- {DSA-6594-1}
+ {DSA-6594-1 DLA-4872-1}
- python-git 3.2.1-1
NOTE:
https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-83vg-56qc-22m7
NOTE: https://github.com/gitpython-developers/GitPython/pull/2264
@@ -24587,33 +24926,34 @@ CVE-2026-110862 (Better Auth from 1.4.0-beta.18
before 1.7.7 contains an authent
CVE-2026-110861 (Better Auth @better-auth/drizzle-adapter and better-auth from
1.6.17 b ...)
NOT-FOR-US: Better Auth
CVE-2026-110860 (GitPython from 3.1.62 before 3.2.0 contains a
symlink-following flaw i ...)
- {DSA-6594-1}
+ {DSA-6594-1 DLA-4872-1}
- python-git 3.2.1-1
NOTE:
https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-gq48-pqfc-9p58
NOTE: Fixed by:
https://github.com/gitpython-developers/GitPython/commit/fb7e089ee0a3394c67057c11bb7f92682ac7960d
(3.2.0)
CVE-2026-110859 (GitPython before 3.2.0 contains an argument injection
vulnerability in ...)
+ {DLA-4872-1}
- python-git 3.2.1-1
[trixie] - python-git <not-affected> (Incomplete fix for CVE-2026-78679
not applied)
NOTE:
https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-23mf-xhv8-69c2
NOTE: Fixed by:
https://github.com/gitpython-developers/GitPython/commit/8da65080849a56a2fc9f3e7817bbf0524e8397d5
(3.2.0)
NOTE: CVE exists because of an incomplete fix for CVE-2026-78679
CVE-2026-110858 (GitPython from 3.1.30 before 3.2.0 contains a remote code
execution vu ...)
- {DSA-6594-1}
+ {DSA-6594-1 DLA-4872-1}
- python-git 3.2.1-1
NOTE:
https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-f9j4-qggq-h239
NOTE: Fixed by:
https://github.com/gitpython-developers/GitPython/commit/dafafff7e5438879d0167c17008342231f7af314
(3.2.0)
CVE-2026-110857 (GitPython before 3.2.0 contains a remote code execution
vulnerability ...)
- {DSA-6594-1}
+ {DSA-6594-1 DLA-4872-1}
- python-git 3.2.1-1
NOTE:
https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-w8jc-g24h-crhw
NOTE: Fixed by:
https://github.com/gitpython-developers/GitPython/commit/9ad28cc4c7176d22cd6181d69805058a719dd03b
(3.2.0)
CVE-2026-110856 (GitPython before 3.2.0 contains a regular expression denial
of service ...)
- {DSA-6594-1}
+ {DSA-6594-1 DLA-4872-1}
- python-git 3.2.1-1
NOTE:
https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-m64x-33q8-m5h7
NOTE: Fixed by:
https://github.com/gitpython-developers/GitPython/commit/8290c98d35465a38090cdcc1b17be69967092a15
(3.2.0)
CVE-2026-110855 (GitPython before 3.2.0 contains an information disclosure
vulnerabilit ...)
- {DSA-6594-1}
+ {DSA-6594-1 DLA-4872-1}
- python-git 3.2.1-1
NOTE:
https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-fx3j-rwgx-fr94
NOTE: Fixed by:
https://github.com/gitpython-developers/GitPython/commit/9349ff58ee00c9fb14d515c8e693f33b2144b238
(3.2.0)
@@ -43986,7 +44326,7 @@ CVE-2026-101888 (The Prime Mover plugin for WordPress
before 2.2.1 contains a Zi
NOT-FOR-US: WordPress plugin
CVE-2026-101322 (In Eclipse BaSyx AAS Web UI versions v2-241220 through
releases before ...)
NOT-FOR-US: Eclipse
-CVE-2026-100517 (Unauthenticated Insecure Direct Object References (IDOR) in
Photo Revi ...)
+CVE-2026-100517 (Authorization Bypass Through User-Controlled Key
vulnerability in Vill ...)
NOT-FOR-US: WordPress plugin or theme
CVE-2026-100514 (Unauthenticated Insecure Direct Object References (IDOR) in
REST API L ...)
NOT-FOR-US: WordPress plugin or theme
@@ -50652,7 +50992,7 @@ CVE-2026-100690 (Hugo versions from v0.161.0 through
v0.165.0 run Node.js tools
[bookworm] - hugo <not-affected> (Vulnerable code not present, only
affects 0.161 and later)
NOTE:
https://github.com/gohugoio/hugo/security/advisories/GHSA-x3mx-cm49-8m9c
CVE-2026-100689 (GitPython before 3.1.62 does not validate the `path` field
read from a ...)
- {DSA-6594-1}
+ {DSA-6594-1 DLA-4872-1}
- python-git 3.1.62-1
NOTE:
https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-59cr-6r3x-644w
NOTE: Fixed by:
https://github.com/gitpython-developers/GitPython/commit/1ed0ebc2f2e74d979cdc367a4864a7731fdcc093
(3.1.62)
@@ -55996,7 +56336,7 @@ CVE-2026-71178 (Dell Secure Connect Gateway (SCG)
Policy Manager, versions prior
NOT-FOR-US: Dell / EMC
CVE-2026-71177 (Dell Secure Connect Gateway (SCG) Policy Manager, versions
prior to 5. ...)
NOT-FOR-US: Dell / EMC
-CVE-2026-70125 (Microsoft Office Outlook Remote Code Execution Vulnerability)
+CVE-2026-70125 (Heap-based buffer overflow in Microsoft Office Outlook allows
an unaut ...)
NOT-FOR-US: Microsoft
CVE-2026-6935 (IBM Concert 1.0.0 through 3.0.0 invokes operating system
commands with ...)
NOT-FOR-US: IBM
@@ -75990,18 +76330,18 @@ CVE-2026-87821 (Lara Dashboard through 1.3.1 contains
a server-side request forg
CVE-2026-87820 (CyberPanel versions 2.4.3 through 2.4.5 expose unauthenticated
AI Scan ...)
NOT-FOR-US: CyberPanel
CVE-2026-87819 (GitPython before 3.1.60 contains a regular expression denial
of servic ...)
- {DSA-6594-1}
+ {DSA-6594-1 DLA-4872-1}
- python-git 3.1.61-1
NOTE:
https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-g5vv-9gxw-82hx
NOTE: Fixed by:
https://github.com/gitpython-developers/GitPython/commit/751473a5f3221d6f989291cbebcc404353fd3ba8
(3.1.60)
NOTE: Followup for bug introduced by CVE fix:
https://github.com/gitpython-developers/GitPython/commit/bc63b027e2fc737e2ec0222bfa764e1aa76a427f
(3.1.61)
CVE-2026-87818 (GitPython 3.1.59 fails to restrict the --no-index option in
the high-l ...)
- {DSA-6594-1}
+ {DSA-6594-1 DLA-4872-1}
- python-git 3.1.61-1
NOTE:
https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-whh4-5q6c-9v3x
NOTE: Fixed by:
https://github.com/gitpython-developers/GitPython/commit/09f2cf383a992d1af697364569e9f384748c1bd8
(3.1.60)
CVE-2026-87817 (GitPython before 3.1.60 fails to properly validate the git
directory l ...)
- {DSA-6594-1}
+ {DSA-6594-1 DLA-4872-1}
- python-git 3.1.61-1
NOTE:
https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-239g-whfq-7xj9
NOTE: Fixed by:
https://github.com/gitpython-developers/GitPython/commit/c7cf4d13b1ed0a2e70f2a1f3c6b4fc6c2652cf0b
(3.1.60)
@@ -95372,28 +95712,28 @@ CVE-2026-78680 (NLTK versions before 3.10.3 fail to
use validated absolute paths
[bookworm] - nltk <postponed> (Minor issue)
NOTE:
https://github.com/nltk/nltk/security/advisories/GHSA-6hwm-xvph-95vm
CVE-2026-78679 (GitPython before 3.1.59 contains an arbitrary file read
vulnerability ...)
- {DSA-6594-1}
+ {DSA-6594-1 DLA-4872-1}
- python-git 3.1.61-1 (bug #1145672)
NOTE:
https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-3wxw-xv34-2frg
NOTE: Fixed by:
https://github.com/gitpython-developers/GitPython/commit/1b0d2d9b91575f7db44ef4ff58ac37fc9335e5f6
(3.1.59)
NOTE: When fixing this issue make sure to fix it completely to not open
up CVE-2026-110859
CVE-2026-78678 (GitPython versions before 3.1.59 contain an incomplete
denylist in the ...)
- {DSA-6594-1}
+ {DSA-6594-1 DLA-4872-1}
- python-git 3.1.61-1 (bug #1145672)
NOTE:
https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-5xxx-qhh7-9287
NOTE: Fixed by:
https://github.com/gitpython-developers/GitPython/commit/1b0d2d9b91575f7db44ef4ff58ac37fc9335e5f6
(3.1.59)
CVE-2026-78677 (GitPython before 3.1.59 omits --separate-git-dir from
unsafe_git_clone ...)
- {DSA-6594-1}
+ {DSA-6594-1 DLA-4872-1}
- python-git 3.1.61-1 (bug #1145672)
NOTE:
https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-8mcc-hrx5-hvxc
NOTE: Fixed by:
https://github.com/gitpython-developers/GitPython/commit/b68afff45af0f49e79a3e2d2162018986b37ad5d
(3.1.59)
CVE-2026-78676 (GitPython before 3.1.59 fails to safely re-serialize
multi-line git-co ...)
- {DSA-6594-1}
+ {DSA-6594-1 DLA-4872-1}
- python-git 3.1.61-1 (bug #1145672)
NOTE:
https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-284h-m62q-gf8w
NOTE: Fixed by:
https://github.com/gitpython-developers/GitPython/commit/4b4e47fc1224e23b0c8ee7220a7192818f2e4abb
(3.1.59)
CVE-2026-78675 (GitPython before 3.1.59 fails to disable merge_includes when
parsing . ...)
- {DSA-6594-1}
+ {DSA-6594-1 DLA-4872-1}
- python-git 3.1.61-1 (bug #1145672)
NOTE:
https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-7833-fr7j-v32q
NOTE: Fixed by:
https://github.com/gitpython-developers/GitPython/commit/ef7568e3b317ce617eacda39b8b54dcdff8c3b5c
(3.1.59)
@@ -99912,32 +100252,32 @@ CVE-2026-76224 (ArcadeDB before 26.8.1
(arcadedb-gremlin, affected <= 26.7.3) co
CVE-2026-76223 (ArcadeDB (com.arcadedb) versions 26.7.3 and earlier fail to
enforce th ...)
NOT-FOR-US: ArcadeDB
CVE-2026-76222 (GitPython before 3.1.58 fails to validate submodule names from
.gitmod ...)
- {DSA-6594-1}
+ {DSA-6594-1 DLA-4872-1}
- python-git 3.1.61-1 (bug #1144929)
NOTE:
https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-hmq2-w58f-27jc
NOTE: Fixed by:
https://github.com/gitpython-developers/GitPython/commit/e4b8e7d026ca6abb4cf604f8e77093432ce23c06
(3.1.58)
CVE-2026-76221 (GitPython before 3.1.58 contains a config-name injection
vulnerability ...)
- {DSA-6594-1}
+ {DSA-6594-1 DLA-4872-1}
- python-git 3.1.61-1 (bug #1144929)
NOTE:
https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-jm78-9fvv-mhgr
NOTE: Fixed by:
https://github.com/gitpython-developers/GitPython/commit/a495ccd3b547ccd60b2187215823b72a9c0188bf
(3.1.58)
CVE-2026-76220 (GitPython before 3.1.58 contains a command execution
vulnerability in ...)
- {DSA-6594-1}
+ {DSA-6594-1 DLA-4872-1}
- python-git 3.1.61-1 (bug #1144929)
NOTE:
https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-wvpp-8hx9-p66j
NOTE: Fixed by:
https://github.com/gitpython-developers/GitPython/commit/96a888f4d782cb2f80452148e48e60ce4af6d541
(3.1.58)
CVE-2026-76219 (GitPython versions before 3.1.58 contain an arbitrary file
overwrite v ...)
- {DSA-6594-1}
+ {DSA-6594-1 DLA-4872-1}
- python-git 3.1.61-1 (bug #1144929)
NOTE:
https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-4gmw-gg2m-w46p
NOTE: Fixed by:
https://github.com/gitpython-developers/GitPython/commit/9b5dcaf85da5946dbf69dcd53f9edba08f760b32
(3.1.58)
CVE-2026-76218 (GitPython before 3.1.58 contains a remote code execution
vulnerability ...)
- {DSA-6594-1}
+ {DSA-6594-1 DLA-4872-1}
- python-git 3.1.61-1 (bug #1144929)
NOTE:
https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-9rj7-rf2p-w77r
NOTE: Fixed by:
https://github.com/gitpython-developers/GitPython/commit/d9ddb55bdc66ffe8c9932fe460e6b8c8211e47c7
(3.1.58)
CVE-2026-76217 (GitPython versions before 3.1.58 fail to validate options
passed to gi ...)
- {DSA-6594-1}
+ {DSA-6594-1 DLA-4872-1}
- python-git 3.1.61-1 (bug #1144929)
NOTE:
https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-hh9p-6wh2-4mfc
NOTE: Fixed by:
https://github.com/gitpython-developers/GitPython/commit/f2550b65bf60ca087190981e2c7b6865e201f40c
(3.1.58)
@@ -111144,38 +111484,38 @@ CVE-2026-73626 (JupyterLab versions >=4.6.0,<=4.6.1
and <=4.5.9 contain an allow
NOTE:
https://github.com/jupyterlab/jupyterlab/security/advisories/GHSA-whvh-wf3x-g77j
NOTE: Fixed by:
https://github.com/jupyterlab/jupyterlab/commit/be9303f5bcd5308eaeae953c5a3c903046682c2c
(v4.5.10)
CVE-2026-73625 (GitPython versions before 3.1.54 contain a remote code
execution vulne ...)
- {DSA-6594-1}
+ {DSA-6594-1 DLA-4872-1}
- python-git 3.1.61-1 (bug #1144344)
NOTE:
https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-r9mr-m37c-5fr3
NOTE: Fixed by:
https://github.com/gitpython-developers/GitPython/commit/e8d0fbf774d1f6baa3b481adfe48bd262e43b453
(3.1.54)
CVE-2026-73624 (GitPython versions before 3.1.54 contain an arbitrary file
overwrite v ...)
- {DSA-6594-1}
+ {DSA-6594-1 DLA-4872-1}
- python-git 3.1.61-1 (bug #1144344)
NOTE:
https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-fjr4-x663-mwxc
NOTE: Fixed by:
https://github.com/gitpython-developers/GitPython/commit/1d51b891d7f236044a6aa17498ec682b63dad6e6
(3.1.54)
CVE-2026-73623 (GitPython before 3.1.54 contains an incomplete denylist in
unsafe_git_ ...)
- {DSA-6594-1}
+ {DSA-6594-1 DLA-4872-1}
- python-git 3.1.61-1 (bug #1144344)
NOTE:
https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-6p8h-3wgx-97gf
NOTE: Fixed by:
https://github.com/gitpython-developers/GitPython/commit/ffcb5359e87619f4fe4a70a4aff5f08c5580ba97
(3.1.54)
CVE-2026-73622 (GitPython before 3.1.55 fails to disable environment variable
expansio ...)
- {DSA-6594-1}
+ {DSA-6594-1 DLA-4872-1}
- python-git 3.1.61-1 (bug #1144344)
NOTE:
https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-94p4-4cq8-9g67
NOTE: Distinct but releated to CVE-2026-67322
NOTE: Fixed by:
https://github.com/gitpython-developers/GitPython/commit/863417457a0633db7ea5aed4fd01e0b291a41162
(3.1.55)
CVE-2026-73621 (GitPython before 3.1.56 contains an argument injection
vulnerability i ...)
- {DSA-6594-1}
+ {DSA-6594-1 DLA-4872-1}
- python-git 3.1.61-1 (bug #1144344)
NOTE:
https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-p538-c434-8v24
NOTE: Fixed by:
https://github.com/gitpython-developers/GitPython/commit/38553b6fddc7f6a667cdb45a6762343a08fc72b2
(3.1.56)
CVE-2026-73620 (GitPython before 3.1.57 fails to guard git option forwarding
in IndexF ...)
- {DSA-6594-1}
+ {DSA-6594-1 DLA-4872-1}
- python-git 3.1.61-1 (bug #1144344)
NOTE:
https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-3f7w-8rr8-f37f
NOTE: Fixed by:
https://github.com/gitpython-developers/GitPython/commit/3af0c2516c5e18c829da30338614688f6b69b49c
(3.1.57)
CVE-2026-73619 (GitPython before 3.1.57 contains an incomplete denylist in the
unsafe_ ...)
- {DSA-6594-1}
+ {DSA-6594-1 DLA-4872-1}
- python-git 3.1.61-1 (bug #1144344)
NOTE:
https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-539m-9xh6-q6rr
NOTE: Fixed by:
https://github.com/gitpython-developers/GitPython/commit/7a4f5dcb7bf3cbcbf6e438017efcdfe0bc0d36ca
(3.1.57)
@@ -122893,7 +123233,7 @@ CVE-2026-69151 (Angular is a development platform for
building mobile and deskto
CVE-2026-69149 (Angular is a development platform for building mobile and
desktop web ...)
- angular.js <unfixed>
CVE-2026-69097 (GitPython before 3.1.53 fails to properly escape section names
in git ...)
- {DSA-6594-1}
+ {DSA-6594-1 DLA-4872-1}
- python-git 3.1.61-1 (bug #1143602)
NOTE:
https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-3rp5-jjmw-4wv2
NOTE: Fixed by:
https://github.com/gitpython-developers/GitPython/commit/1ed1b924f4e2d2ee7bab296df77b978af21853f1
(3.1.53)
@@ -123590,28 +123930,28 @@ CVE-2026-67328 (@better-auth/sso versions before
1.6.21 contain multiple authent
CVE-2026-67327 (better-auth versions >= 1.1.3 and < 1.6.22 (and pre-release
versions > ...)
NOT-FOR-US: Better Auth
CVE-2026-67326 (GitPython before 3.1.50 fails to validate newline characters
in the se ...)
- {DSA-6594-1}
+ {DSA-6594-1 DLA-4872-1}
- python-git 3.1.50-1
NOTE:
https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-mv93-w799-cj2w
NOTE:
https://github.com/gitpython-developers/GitPython/commit/54538428f79b0c91ba52cda5229856a6edf7ac06
(3.1.50)
CVE-2026-67325 (GitPython before 3.1.51 contains an incomplete command
injection block ...)
- {DSA-6594-1}
+ {DSA-6594-1 DLA-4872-1}
- python-git 3.1.61-1 (bug #1143454)
NOTE:
https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-2f96-g7mh-g2hx
NOTE: Fixed by:
https://github.com/gitpython-developers/GitPython/commit/181e8ede7543dbbdcee92756cea260f675316c63
(3.1.51)
NOTE: Fixed by:
https://github.com/gitpython-developers/GitPython/commit/56806080c1348749b07daa4a2024ce47b3cad285
(3.1.51)
CVE-2026-67324 (GitPython 3.1.50 fails to recognize joined short-option forms
such as ...)
- {DSA-6594-1}
+ {DSA-6594-1 DLA-4872-1}
- python-git 3.1.61-1 (bug #1143454)
NOTE:
https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-v396-v7q4-x2qj
NOTE: Fixed by:
https://github.com/gitpython-developers/GitPython/commit/2ab051697940144545a14d2f4a639c6409c3187f
(3.1.51)
CVE-2026-67323 (GitPython before 3.1.51 fails to guard against dangerous Git
options p ...)
- {DSA-6594-1}
+ {DSA-6594-1 DLA-4872-1}
- python-git 3.1.61-1 (bug #1143454)
NOTE:
https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-956x-8gvw-wg5v
NOTE: Fixed by:
https://github.com/gitpython-developers/GitPython/commit/701ce32fe5ba8cb622c0e0342a376a6beb47d738
(3.1.51)
CVE-2026-67322 (GitPython before 3.1.52 is vulnerable to environment-variable
exfiltra ...)
- {DSA-6594-1}
+ {DSA-6594-1 DLA-4872-1}
- python-git 3.1.61-1 (bug #1143454)
NOTE:
https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-rwj8-pgh3-r573
NOTE: Fixed by:
https://github.com/gitpython-developers/GitPython/commit/8ac5a30519b6f4af85398b9b9d7064ff4d452da2
(3.1.52)
@@ -193949,14 +194289,14 @@ CVE-2026-44264 (Weblate is a web based localization
tool. Prior to version 5.17.
CVE-2026-44263 (Weblate is a web based localization tool. Prior to version
5.17.1, the ...)
- weblate <itp> (bug #745661)
CVE-2026-44244 (GitPython is a python library used to interact with Git
repositories. ...)
- {DSA-6594-1}
+ {DSA-6594-1 DLA-4872-1}
- python-git 3.1.50-1
NOTE:
https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-v87r-6q3f-2j67
NOTE: https://github.com/gitpython-developers/GitPython/pull/2137
NOTE:
https://github.com/gitpython-developers/GitPython/commit/c417af469f9aa3da8dfef78f996c0fb8c5d1f4c2
(3.1.49)
NOTE:
https://github.com/gitpython-developers/GitPython/commit/8e24503b42c1d63dd98e8b2e6a2f655bdd0821e3
(3.1.49)
CVE-2026-44243 (GitPython is a python library used to interact with Git
repositories. ...)
- {DSA-6594-1}
+ {DSA-6594-1 DLA-4872-1}
- python-git 3.1.50-1
NOTE:
https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-7545-fcxq-7j24
NOTE: https://github.com/gitpython-developers/GitPython/pull/2134
@@ -200133,12 +200473,12 @@ CVE-2026-23773 (Dell Disk Library for Mainframe,
version(s) DLm 8700/2700 contai
CVE-2026-21023 (Insufficient verification of data authenticity in
PackageManagerServic ...)
NOT-FOR-US: Samsung Mobile
CVE-2026-42215 (GitPython is a python library used to interact with Git
repositories. ...)
- {DSA-6594-1}
+ {DSA-6594-1 DLA-4872-1}
- python-git 3.1.50-1 (bug #1135349)
NOTE:
https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-rpm5-65cw-6hj4
NOTE: Fixed by:
https://github.com/gitpython-developers/GitPython/commit/0f68db0710f9125762fca5dbc2328593537ae923
(3.1.47)
CVE-2026-42284 (GitPython is a python library used to interact with Git
repositories. ...)
- {DSA-6594-1}
+ {DSA-6594-1 DLA-4872-1}
- python-git 3.1.50-1 (bug #1135350)
NOTE:
https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-x2qx-6953-8485
NOTE: Fixed by:
https://github.com/gitpython-developers/GitPython/pull/2130
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e0d2e99d9eab277462ae512d9de11d350f81873c
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e0d2e99d9eab277462ae512d9de11d350f81873c
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
