CVE-2026-127285

A flaw has been found in Cairo-dock Glx-Dock 3.4.0. The affected element is an unknown function of the file bgforum.php of the component href Attribute Handler. This manipulation of the argument f causes cross site scripting. The attack may be initiated remotely. The exploit has been published an...

CVE-2026-127285

A cross-site scripting (XSS) vulnerability exists in Cairo-dock Glx-Dock 3.4.0 . The flaw is located within the href Attribute Handler of the bg_forum.php file, where the manipulation of the argument f allows for remote execution of the attack. While the exploit has been published and may be used...

EUVD-2026-124825

A flaw has been found in Cairo-dock Glx-Dock 3.4.0. The affected element is an unknown function of the file bgforum.php of the component href Attribute Handler. This manipulation of the argument f causes cross site scripting. The attack may be initiated remotely. The exploit has been published an...

PT-2026-146343

A flaw has been found in Cairo-dock Glx-Dock 3.4.0. The affected element is an unknown function of the file bg forum.php of the component href Attribute Handler. This manipulation of the argument f causes cross site scripting. The attack may be initiated remotely. The exploit has been published a...

caracal

Caracal Caracal is a static analyzer tool over the SIERRA representation for Starknet smart contracts. Features Detectors to detect vulnerable Cairo code Printers to report information Taint analysis Data flow analysis framework Easy to run in Scarb projects Installation Precompiled binaries...

CVE-2025-50422

Poppler before version 25.04.0 When pdftocairo renders a malicious PDF and calls cairodebugresetstaticdata on exit, heap memory containing PDF object streams is not properly cleared. An attacker with local access can dump process memory and recover clear-text PDF content e.g., /stream /endstream...

CLEANSTART-2026-UB36920 cairo 1

Security vulnerability affects the cairo package. cairo 1...

CLEANSTART-2026-TT10163 flaw was found in cairo's image-compositor

Security vulnerability affects the cairo package. A flaw was found in cairo's image-compositor...

CLEANSTART-2026-ZB81675 issue was discovered in cairo 1

Security vulnerability affects the cairo package. An issue was discovered in cairo 1...

PT-2026-143142

Security vulnerability affects the cairo package. A flaw was found in cairo's image-compositor...

CLEANSTART-2024-KA98593 use-after-free vulnerability was found via testing, and traced to an out-of-date Cairo library

Security vulnerability affects the firefox package. A use-after-free vulnerability was found via testing, and traced to an out-of-date Cairo library...

Linux Distros Unpatched Vulnerability : CVE-2026-108834

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was detected in Cairo-dock Glx-Dock up to 3.4.0. This issue affects some unknown processing of the file wwpage.php of the component Query...

Astra Linux – Vulnerability in Cairo

A flaw was discovered in cairo’s image-compositor.c in all versions prior to 1.17.4. This flaw allows an attacker who can provide a crafted input file to cairo’s image-compositor for example, by convincing a user to open a file in an application that uses cairo, or if an application uses cairo on...

Astra Linux – Vulnerability in Firefox

A use-after-free vulnerability was identified during testing, and it was traced to an outdated Cairo library. Updating the library resolved the issue, and it may have also addressed other unknown security vulnerabilities. This vulnerability affects Firefox versions earlier than 90...

cairo:font_fuzzer: Heap-double-free in bdf_free_font

Detailed Report: https://oss-fuzz.com/testcase?key=5997915466956800 Project: cairo Fuzzing Engine: afl Fuzz Target: fontfuzzer Job Type: aflasancairo Platform Id: linux Crash Type: Heap-double-free Crash Address: 0x79ec2b4e0740 Crash State: bdffreefont BDFFaceDone destroyface Sanitizer: address...

CVE-2026-108834

A vulnerability was detected in Cairo-dock Glx-Dock up to 3.4.0. This issue affects some unknown processing of the file wwpage.php of the component Query Parameter Handler. Performing a manipulation of the argument p results in cross site scripting. The attack is possible to be carried out...

UBUNTU-CVE-2026-108834

A vulnerability was detected in Cairo-dock Glx-Dock up to 3.4.0. This issue affects some unknown processing of the file wwpage.php of the component Query Parameter Handler. Performing a manipulation of the argument p results in cross site scripting. The attack is possible to be carried out...

CVE-2026-108834

A vulnerability was detected in Cairo-dock Glx-Dock up to 3.4.0. This issue affects some unknown processing of the file wwpage.php of the component Query Parameter Handler. Performing a manipulation of the argument p results in cross site scripting. The attack is possible to be carried out...

CVE-2026-108834 Cairo-dock Glx-Dock Query Parameter ww_page.php cross site scripting

A vulnerability was detected in Cairo-dock Glx-Dock up to 3.4.0. This issue affects some unknown processing of the file wwpage.php of the component Query Parameter Handler. Performing a manipulation of the argument p results in cross site scripting. The attack is possible to be carried out...

CVE-2026-108834

A cross-site scripting (XSS) vulnerability exists in Cairo-dock Glx-Dock up to version 3.4.0 . The flaw is located in the Query Parameter Handler component, specifically involving the processing of the ww_page.php file. By manipulating the p argument, an attacker can execute a remote XSS attack. ...