openSUSE-SU-2026:22199-1
openSUSE-SU-2026:22199-1 · Security update for epiphany
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This update for epiphany fixes the following issues: Changes in epiphany: - CVE-2026-77679: path traversal in WebExtension XPI extraction (ZIP slip) (bsc#1276758) - CVE-2026-77682: JavaScript code injection in autofill via unsanitized CSS selector from element id (bsc#1275932)
Fix available
- Published
- Updated
Stack: system
Affected products and versions
epiphany openSUSE:Leap 16.0
- Affected ranges
- ECOSYSTEM: < 48.5-bp160.2.1
Update to 48.5-bp160.2.1