7 matches found
CVE-2026-66298
CVE-2026-66298 concerns Livebook’s JS-view sandbox where untrusted, notebook-defined JavaScript can trigger session-wide keyboard shortcuts. The root cause is in the trusted iframe shell forwarding every keydown to the parent without checking Event.isTrusted, allowing events synthesized by the un...
CVE-2026-66298 JS-view sandboxed output can synthesize keyboard events to trigger unconfirmed global shortcuts
Origin Validation Error vulnerability in livebook-dev livebook allows untrusted notebook output JavaScript to trigger session-wide keyboard shortcuts, including forced evaluation of all cells and runtime restart. Livebook's JS-view feature renders notebook-defined JavaScript inside a sandboxed,...
[SECURITY] Fedora 44 Update: kf6-kglobalaccel-6.25.0-1.fc44
KDE Frameworks 6 Tier 3 integration module for global shortcuts...
[SECURITY] Fedora 28 Update: cantata-2.3.1-1.fc28
Cantata is a graphical client for the music player daemon MPD. Features: Multiple MPD collections. Highly customisable layout. Songs grouped by album in play queue. Context view to show artist, album, and song information of current track. Simple tag editor. File organizer - use tags to organize...
[SECURITY] Fedora 27 Update: cantata-2.3.1-1.fc27
Cantata is a graphical client for the music player daemon MPD. Features: Multiple MPD collections. Highly customisable layout. Songs grouped by album in play queue. Context view to show artist, album, and song information of current track. Simple tag editor. File organizer - use tags to organize...