PublicSafe

PublicSafe Your Browser, Your Safe Space PublicSafe is a free and open-source browser extension focused on privacy, encryption, and user control. It provides client-side encryption tools designed to help users protect sensitive information before it leaves their browser. PublicSafe is built aroun...

pki-toolbox

pki-toolbox セルフホスト可能な、100%クライアントサイドで動作するPKI成果物向けツールボックス : X.509証明書、PKCS10 CSR、チェーン、CRL、PKCS7およびPKCS12バンドル、生のASN.1、フォーマット変換、フィンガープリント、証明書発行。オンライン証明書デコーダーに代わる、プライバシーを尊重したセルフホスト可能な代替ツールです。 ライブデモ: https://pki-toolbox.youkyi.net デモは以下でセルフホストできるものと同じ静的ビルドです。貼り付けた内容がブラウザから出ることはありません。...

EUVD-2026-89554

Uncontrolled recursion in the Gosub browser engine gosub-engine through 0.1.0 and main before commit 46868b3 allows a remote attacker to cause a Denial of Service stack exhaustion and application crash via an SVG document containing an excessive number of deeply nested elements. Because the engin...

CVE-2026-103087

The Gosub browser engine (gosub-engine ) is vulnerable to uncontrolled recursion in versions through 0.1.0 and main before commit 46868b3 . An attacker can trigger a Denial of Service (stack exhaustion and application crash) by providing an SVG document with excessively nested elements. The engin...

CVE-2026-103087

Uncontrolled recursion in the Gosub browser engine gosub-engine through 0.1.0 and main before commit 46868b3 allows a remote attacker to cause a Denial of Service stack exhaustion and application crash via an SVG document containing an excessive number of deeply nested elements. Because the engin...

CVE-2026-103087

Uncontrolled recursion in the Gosub browser engine gosub-engine through 0.1.0 and main before commit 46868b3 allows a remote attacker to cause a Denial of Service stack exhaustion and application crash via an SVG document containing an excessive number of deeply nested elements. Because the engin...

EUVD-2026-89476

An attacker can construct a request that, if issued by another application user, will cause JavaScript code supplied by the attacker to execute within the user's browser in the context of that user's session with the application...

RHEL 8 : webkit2gtk3 (RHSA-2026:74084)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:74084 advisory. WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fixes: chromium-browser: skia:...

SUSE CVE-2026-101900

Axios is a promise-based HTTP client for the browser and Node.js. From 1.12.0 until 1.20.0, ResolveConfig reads inherited Symbol.toStringTag, append, and getHeaders properties while resolving FormData headers. A separate same-process prototype-pollution flaw supplies an array or non-plain class...

SUSE CVE-2026-101902

Axios is a promise-based HTTP client for the browser and Node.js. From 0.27.2 until 0.34.0 and 1.20.0, Axios default-instance requests that omit an explicit method can read an inherited method value from Object.prototype. If another vulnerability in the same process pollutes...

CVE-2026-71189

An attacker can construct a request that, if issued by another application user, will cause JavaScript code supplied by the attacker to execute within the user's browser in the context of that user's session with the application...

CVE-2026-102325

An uninitialized resource flaw was found in the Skia component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=561994362 https://code.google.com/p/chromium/issues/detail?id=102325...

CVE-2026-102326

A type confusion flaw was found in the V8 component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=560233248 https://code.google.com/p/chromium/issues/detail?id=102326...

CVE-2026-102328

A type confusion flaw was found in the V8 component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=560536732 https://code.google.com/p/chromium/issues/detail?id=102328...

CVE-2026-102315

An uninitialized resource flaw was found in the Media component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=563351482 https://code.google.com/p/chromium/issues/detail?id=102315...

CVE-2026-102308

A flaw was found in chromium-browser. This vulnerability allows a remote attacker to execute arbitrary code outside the browser's restricted security sandbox. By convincing a user to visit a specially crafted web page, an attacker can exploit a use-after-free memory corruption flaw within the Vie...

CVE-2026-102319

An uninitialized resource flaw was found in the GPU component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=562042411 https://code.google.com/p/chromium/issues/detail?id=102319...

CVE-2026-102307

An uninitialized resource flaw was found in the Dawn component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=556959073 https://code.google.com/p/chromium/issues/detail?id=102307...

CVE-2026-102316

An use after free flaw was found in the Views component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=560238698 https://code.google.com/p/chromium/issues/detail?id=102316...

CVE-2026-102313

A flaw was found in chromium-browser. An uninitialized resource in the ANGLE Almost Native Graphics Layer Engine component leads to information disclosure. A remote attacker can exploit this vulnerability by convincing a user to open a crafted HTML page, enabling the attacker to read memory outsi...