CVE-2026-118599

A file overwrite vulnerability exists in Epiphany (version >= 47.0 ) when installing WebExtension packages from .xpi files. The root cause is that the decompress_xpi_thread() function in src/webextension/ephy-web-extension-manager.c uses libarchive with archive_read_support_format_all(), allow...