52511 matches found
CVE-2026-86252: Improper Neutralization of Special Elements in Output Used by a Downstream Component
h3 versions before 1.15.9 fail to sanitize carriage return characters in EventStream data and comment fields, allowing attackers to inject arbitrary SSE events by including unsanitized carriage returns. Attackers can inject event type directives, split single push calls into multiple browser-pars...
brave-browser v1.97.8
Brave Browser This repository is not needed for building the browser and only holds issues, releases and the wiki. The source code and contributions are at https://github.com/brave/brave-core. You can visit our website to get the latest stable release. Resources Issues: Bug reports and feature...
GHSA-3H3X-M88J-VRHJ vulnerabilities
Vulnerabilities for packages: firefox...
GHSA-JM34-3R5Q-PM6J vulnerabilities
Vulnerabilities for packages: firefox...
CVE-2026-84132 vulnerabilities
Vulnerabilities for packages: firefox...
GHSA-H34P-XGVR-MFG3 vulnerabilities
Vulnerabilities for packages: firefox...
CVE-2026-84145 vulnerabilities
Vulnerabilities for packages: firefox...
GHSA-26H4-6RVJ-CPH2 vulnerabilities
Vulnerabilities for packages: firefox...
GHSA-96PH-P3MM-PHXP vulnerabilities
Vulnerabilities for packages: firefox...
CVE-2026-84134 vulnerabilities
Vulnerabilities for packages: firefox...
[SECURITY] Fedora 44 Update: chromium-152.0.7977.75-1.fc44
Chromium is an open-source web browser, powered by WebKit Blink...
[SECURITY] Fedora 44 Update: rust-webbrowser-1.2.4-1.fc44
Open URLs in web browsers available on a platform...
[SECURITY] Fedora 43 Update: chromium-152.0.7977.75-1.fc43
Chromium is an open-source web browser, powered by WebKit Blink...
[SECURITY] Fedora 43 Update: rust-webbrowser-1.2.4-1.fc43
Open URLs in web browsers available on a platform...
MozillaFirefox-155.0-1.1 on GA media (moderate)
MozillaFirefox-155.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11677-1 Rating: moderate Cross-References: CVE-2026-84117 CVE-2026-84118 CVE-2026-84119 CVE-2026-84120 CVE-2026-84121 CVE-2026-84122 CVE-2026-84123 CVE-2026-84124 CVE-2026-84125 CVE-2026-84126 CVE-2026-84127 CVE-2026-84128...
CVE-2026-61614 SolidInvoice's long-lived API tokens accepted as URL query parameters, exposing credentials in server logs and browser history
SolidInvoice is an open-source invoicing platform. Prior to version 3.0.1, the REST API authenticator accepts bearer tokens via a ?token= URL query parameter as a fallback to the X-API-TOKEN header. This causes long-lived API credentials to be recorded in server access logs, proxy logs, browser...
CVE-2026-61614 SolidInvoice's long-lived API tokens accepted as URL query parameters, exposing credentials in server logs and browser history
SolidInvoice is an open-source invoicing platform. Prior to version 3.0.1, the REST API authenticator accepts bearer tokens via a ?token= URL query parameter as a fallback to the X-API-TOKEN header. This causes long-lived API credentials to be recorded in server access logs, proxy logs, browser...
GHSA-RQ7C-38W9-8XH5 vulnerabilities
Vulnerabilities for packages: chromium...