PT-2026-134824

CVE-2026-77679

Published

2026-10-28

Updated

2026-10-30

Score

N/A

Not available

No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.

This update for epiphany fixes the following issues:

Changes in epiphany:

CVE-2026-77679: path traversal in WebExtension XPI extraction (ZIP slip) (bsc#1276758)
CVE-2026-77682: JavaScript code injection in autofill via unsanitized CSS selector from element id (bsc#1275932)

Vendors

Affected products

Related identifiers

OPENSUSE-SU-2026:12361-1

OPENSUSE-SU-2026:22199-1

Found an issue in the description? Have something to add? Feel free to write us 👾