CVE-2026-63278

creationtimestamp| type| source ---|---|--- 2026-09-22 12:46:50+00:00| seen| https://bsky.app/profile/suriq.io/post/3mw4b3d2jjx2g 2026-10-03 18:50:26+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117378477131230353...

CVE-2026-63278

URLs could be constructed which expanded environment variable or INI file values, so potentially sensitive information could be exfiltrated to a remote server on opening a document containing such links. The check added for CVE-2024-12426 did not recognise every way of naming the package content...

DEBIAN-CVE-2026-63278

URLs could be constructed which expanded environment variable or INI file values, so potentially sensitive information could be exfiltrated to a remote server on opening a document containing such links. The check added for CVE-2024-12426 did not recognise every way of naming the package content...