CVE-2026-77682
epiphany-51.1-1.1 on GA media
No scoreFix available
[Use a user message to trigger form autofill]
What each source reports
OSVopenSUSE-SU-2026:12361-1 No score
epiphany-51.1-1.1 on GA media
These are all security issues fixed in the epiphany-51.1-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2026:12361-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2026:22199-1 No score
Security update for epiphany
This update for epiphany fixes the following issues:
Changes in epiphany:
- CVE-2026-77679: path traversal in WebExtension XPI extraction (ZIP slip) (bsc#1276758)
- CVE-2026-77682: JavaScript code injection in autofill via unsanitized CSS selector from element id (bsc#1275932)
- Record
openSUSE-SU-2026:22199-1- Updated
- 2026-11-02
OSVUBUNTU-CVE-2026-77682 No score
[Use a user message to trigger form autofill]
- Record
UBUNTU-CVE-2026-77682- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
epiphany-browserDebian:12 |
All versions, plus listed versions 43.1-144.0-144.1-144.2-144.3-1 Show 40 moreShow less44.5-144.5-244.6-144~rc-145.0-145.1-145.2-145~beta-146.0-146.0-246.1-146.2-146.3-146~alpha-146~beta-147.0-147.2-147~beta-147~rc-148.0-148.1-148.2-148.3-148.3-248.5-148.5-248.5-348~beta-148~rc-148~rc-249.0-149.1-149.2-149.2-249.2-350.3-150.3-250.4-150.4-251~rc-1 |
None known |
epiphany-browserDebian:13 |
All versions, plus listed versions 48.3-248.5-0+deb13u148.5-148.5-248.5-3 Show 10 moreShow less49.0-149.1-149.2-149.2-249.2-350.3-150.3-250.4-150.4-251~rc-1 |
None known |
epiphany-browserDebian:14 |
before 51~rc-1, plus listed versions 48.3-248.5-148.5-248.5-349.0-1 Show 8 moreShow less49.1-149.2-149.2-249.2-350.3-150.3-250.4-150.4-2 |
51~rc-1 |
epiphany-browserUbuntu:16.04:LTS |
All versions, plus listed versions 3.16.3-1ubuntu13.18.0-1ubuntu23.18.1-1ubuntu13.18.3-0ubuntu13.18.5-0ubuntu13.18.5-0ubuntu1.13.18.10-0ubuntu13.18.11-0ubuntu1 |
None known |
epiphany-browserUbuntu:18.04:LTS |
All versions, plus listed versions 3.26.1-1ubuntu13.26.1-1ubuntu23.26.1-1ubuntu43.26.5.1-1ubuntu13.27.90-1ubuntu1 Show 4 moreShow less3.28.0.1-1ubuntu13.28.1-1ubuntu13.28.5-0ubuntu13.28.6-0ubuntu1 |
None known |
epiphany-browserUbuntu:20.04:LTS |
All versions, plus listed versions 3.34.1-13.34.1-1build13.36.0-13.36.1-13.36.2-0ubuntu13.36.3-0ubuntu13.36.4-0ubuntu13.36.4-0ubuntu2 |
None known |
epiphany-browserUbuntu:22.04:LTS |
All versions, plus listed versions 41.0-141.0-241.2-141.3-142~beta-1 Show 4 moreShow less42.0-142.1-142.1-1ubuntu142.4-0ubuntu1 |
None known |
epiphany-browserUbuntu:24.04:LTS |
All versions, plus listed versions 45.0-145.1-146~alpha-146~beta-146.0-146.0-2build146.5-0ubuntu1 |
None known |
epiphany-browserUbuntu:26.10 |
All versions, plus listed versions 49.2-3ubuntu150.4-150.4-2 |
None known |
epiphany-browserUbuntu:26.04:LTS |
All versions, plus listed versions 48.5-349.1-149.2-149.2-249.2-349.2-3ubuntu1 |
None known |
epiphanyopenSUSE:Tumbleweed From an advisory covering 4 CVEs |
before 51.1-1.1 | 51.1-1.1 |
epiphanyopenSUSE:Leap 16.0 From an advisory covering 2 CVEs |
before 48.5-bp160.2.1 | 48.5-bp160.2.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2026-77682 is a vulnerability with no CVSS score yet in epiphany, published August 22, 2026. No source lists public exploit code. Fixed in epiphany-browser 51~rc-1.