Important: firefox

Issue Overview: Privilege escalation in the Graphics: WebRender component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12. CVE-2026-12289 Memory safety bug fixed in Thunderbird 152. This vulnerability was fixed in Firef...

Important: thunderbird

Issue Overview: Privilege escalation in the Graphics: WebRender component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12. CVE-2026-12289 Memory safety bug fixed in Thunderbird 152. This vulnerability was fixed in Firef...

networking-mlnx (>=11.0.0, <=11.1.0), python-saharaclient (0.11.0) +1 more potentially affected by CVE-2023-6110 via python-openstackclient (3.8.2)

python-openstackclient PYPI version 3.8.2 is affected by a known vulnerability. The following packages have a transitive dependency on python-openstackclient and may be impacted: - networking-mlnx =11.0.0, =2.4.0, =2.5.0 Source cves: CVE-2023-6110 Source advisory: OSV:PYSEC-2026-1853...

networking-bigswitch (>=15.0.0, <=15.0.2) potentially affected by CVE-2023-3637 via neutron (15.3.4)

neutron PYPI version 15.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on neutron and may be impacted: - networking-bigswitch =15.0.0, =15.0.2 Source cves: CVE-2023-3637 Source advisory: OSV:PYSEC-2026-1694...

networking-odl (14.0.1), networking-ovn (6.0.1) +2 more potentially affected by CVE-2023-3637 via neutron (14.4.2)

neutron PYPI version 14.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on neutron and may be impacted: - networking-odl 14.0.1 - networking-ovn 6.0.1 - neutron-fwaas 14.0.1 - neutron-vpnaas 14.0.1 Source cves: CVE-2023-3637 Source advisory:...

networking-bagpipe (8.0.1), networking-baremetal (1.0.1) +1 more potentially affected by CVE-2023-3637 via neutron (12.1.1)

neutron PYPI version 12.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on neutron and may be impacted: - networking-bagpipe 8.0.1 - networking-baremetal 1.0.1 - networking-mlnx 12.4.0 Source cves: CVE-2023-3637 Source advisory: OSV:PYSEC-2026-1694...

networking-odl (13.0.1), networking-ovn (5.1.0) +3 more potentially affected by CVE-2023-3637 via neutron (13.0.7)

neutron PYPI version 13.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on neutron and may be impacted: - networking-odl 13.0.1 - networking-ovn 5.1.0 - neutron-dynamic-routing 13.1.0 - neutron-fwaas =13.0.2, =13.0.3 - neutron-vpnaas 13.0.2 Source cve...

networking-bagpipe (10.0.1), vmware-nsx (>=14.0.1, <=14.3.0) potentially affected by CVE-2023-3637 via neutron (15.0.0.0rc2)

neutron PYPI version 15.0.0.0rc2 is affected by a known vulnerability. The following packages have a transitive dependency on neutron and may be impacted: - networking-bagpipe 10.0.1 - vmware-nsx =14.0.1, =14.3.0 Source cves: CVE-2023-3637 Source advisory: OSV:PYSEC-2026-1694...

networking-bigswitch (>=15.0.0, <=15.0.2) potentially affected by CVE-2022-3277 via neutron (15.3.4)

neutron PYPI version 15.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on neutron and may be impacted: - networking-bigswitch =15.0.0, =15.0.2 Source cves: CVE-2022-3277 Source advisory: OSV:PYSEC-2026-855...

networking-odl (13.0.1), networking-ovn (5.1.0) +3 more potentially affected by CVE-2022-3277 via neutron (13.0.7)

neutron PYPI version 13.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on neutron and may be impacted: - networking-odl 13.0.1 - networking-ovn 5.1.0 - neutron-dynamic-routing 13.1.0 - neutron-fwaas =13.0.2, =13.0.3 - neutron-vpnaas 13.0.2 Source cve...

networking-odl (14.0.1), networking-ovn (6.0.1) +2 more potentially affected by CVE-2022-3277 via neutron (14.4.2)

neutron PYPI version 14.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on neutron and may be impacted: - networking-odl 14.0.1 - networking-ovn 6.0.1 - neutron-fwaas 14.0.1 - neutron-vpnaas 14.0.1 Source cves: CVE-2022-3277 Source advisory:...

networking-bagpipe (10.0.1), vmware-nsx (>=14.0.1, <=14.3.0) potentially affected by CVE-2022-3277 via neutron (15.0.0.0rc2)

neutron PYPI version 15.0.0.0rc2 is affected by a known vulnerability. The following packages have a transitive dependency on neutron and may be impacted: - networking-bagpipe 10.0.1 - vmware-nsx =14.0.1, =14.3.0 Source cves: CVE-2022-3277 Source advisory: OSV:PYSEC-2026-855...

networking-bagpipe (8.0.1), networking-baremetal (1.0.1) +1 more potentially affected by CVE-2022-3277 via neutron (12.1.1)

neutron PYPI version 12.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on neutron and may be impacted: - networking-bagpipe 8.0.1 - networking-baremetal 1.0.1 - networking-mlnx 12.4.0 Source cves: CVE-2022-3277 Source advisory: OSV:PYSEC-2026-855...

firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Networking component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape due to incorrect boundary conditions in the Networking component...

firefox: thunderbird: Same-origin policy bypass in the Networking: Cookies component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Same-origin policy bypass in the Networking: Cookies component...

firefox: thunderbird: Use-after-free in the Networking: HTTP component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the Networking: HTTP component...

firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Networking component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape due to incorrect boundary conditions in the Networking component...

firefox: thunderbird: Same-origin policy bypass in the Networking: Cookies component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Same-origin policy bypass in the Networking: Cookies component...

firefox: thunderbird: Use-after-free in the Networking: HTTP component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the Networking: HTTP component...

firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Networking component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape due to incorrect boundary conditions in the Networking component...