CVE-2025-66286

Name of the Vulnerable Software and Affected Versions WebKitGTK (affected versions not specified) WPE WebKit (affected versions not specified)

Description An API design flaw allows untrusted web content to unexpectedly perform IP connections, DNS lookups, and HTTP requests. While applications typically use the WebPage::send-request signal handler to approve or reject network requests, certain types of HTTP requests bypass this handler.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.