{"id":"CVE-2025-43392","aliases":["ALSA-2025:22789","ALSA-2025:22790","CLSA-2025-1766568231","CLSA-2025-1767001828","DEBIAN-CVE-2025-43392","DLA-4394-1","DSA-6070-1","EUVD-2025-37699","GHSA-mcgq-5c2q-chc3","MGASA-2025-0319","RHSA-2025:22789","RHSA-2025:22790","RHSA-2025:23110","RHSA-2025:23433","RHSA-2025:23434","RHSA-2025:23451","RHSA-2025:23452","RHSA-2025:23583","RHSA-2025:23591","RHSA-2025:23742","RHSA-2025:23743","RLSA-2025:22789","RLSA-2025:22790","SUSE-SU-2025:4416-1","SUSE-SU-2025:4423-1","SUSE-SU-2026:0021-1","SUSE-SU-2026:20102-1","UBUNTU-CVE-2025-43392","USN-7914-1","openSUSE-SU-2026:20065-1"],"status":"published","title":"The issue was addressed with improved handling of caches. This issue is fixed in Safari 26.1,...","description":"The issue was addressed with improved handling of caches. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. A website may exfiltrate image data cross-origin.","severity":{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","level":"medium","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-09","score":0.005,"percentile":0.43145,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-524","CWE-942"],"published":"2025-11-04T01:15:34Z","modified":"2026-10-29T11:32:29Z","fixes":[{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"webkit2gtk3","fixed_in":["2.50.1-1.el9.tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"webkit2gtk3-devel","fixed_in":["2.50.1-1.el9.tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"webkit2gtk3-jsc","fixed_in":["2.50.1-1.el9.tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"webkit2gtk3-jsc-devel","fixed_in":["2.50.1-1.el9.tuxcare.els5"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"webkit2gtk","fixed_in":["2.50.2-1~deb12u1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"webkit2gtk","fixed_in":["2.50.2-1~deb13u1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"webkit2gtk","fixed_in":["2.50.2-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"wpewebkit","fixed_in":["2.50.2-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"webkit2gtk","fixed_in":["2.50.2-0ubuntu0.22.04.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"webkit2gtk","fixed_in":["2.50.2-0ubuntu0.24.04.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:25.10","package":"webkit2gtk","fixed_in":["2.50.2-0ubuntu0.25.10.2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:8","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.50.3-1.el8_10"}]}],"bundled":21},{"source":"osv","ecosystem":"AlmaLinux:8","package":"webkit2gtk3-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.50.3-1.el8_10"}]}],"bundled":21},{"source":"osv","ecosystem":"AlmaLinux:8","package":"webkit2gtk3-jsc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.50.3-1.el8_10"}]}],"bundled":21},{"source":"osv","ecosystem":"AlmaLinux:8","package":"webkit2gtk3-jsc-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.50.3-1.el8_10"}]}],"bundled":21},{"source":"osv","ecosystem":"AlmaLinux:9","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.50.3-1.el9_7"}]}],"bundled":18},{"source":"osv","ecosystem":"AlmaLinux:9","package":"webkit2gtk3-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.50.3-1.el9_7"}]}],"bundled":18},{"source":"osv","ecosystem":"AlmaLinux:9","package":"webkit2gtk3-jsc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.50.3-1.el9_7"}]}],"bundled":18},{"source":"osv","ecosystem":"AlmaLinux:9","package":"webkit2gtk3-jsc-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.50.3-1.el9_7"}]}],"bundled":18},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.50.1-1.el9.tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"webkit2gtk3-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.50.1-1.el9.tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"webkit2gtk3-jsc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.50.1-1.el9.tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"webkit2gtk3-jsc-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.50.1-1.el9.tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.50.3-1.el9_6.tuxcare.els1"}]}],"bundled":15},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"webkit2gtk3-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.50.3-1.el9_6.tuxcare.els1"}]}],"bundled":15},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"webkit2gtk3-jsc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.50.3-1.el9_6.tuxcare.els1"}]}],"bundled":15},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"webkit2gtk3-jsc-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.50.3-1.el9_6.tuxcare.els1"}]}],"bundled":15},{"source":"osv","ecosystem":"Debian:12","package":"webkit2gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.50.2-1~deb12u1"}]}],"versions":["2.40.1-1","2.40.2-1","2.40.2-1~deb11u1","2.40.2-1~deb12u1","2.40.3-1","2.40.3-2","2.40.3-2~deb11u1","2.40.3-2~deb11u2","2.40.3-2~deb12u1","2.40.3-2~deb12u2","2.40.4-1","2.40.5-1","2.40.5-1~deb11u1","2.40.5-1~deb12u1","2.41.4-1","2.41.5-1","2.41.6-1","2.41.90-1","2.41.91-1","2.41.91-2","2.41.92-1","2.42.0-1","2.42.0-1~bpo12+1","2.42.1-1","2.42.1-1~bpo12+1","2.42.1-1~deb11u1","2.42.1-1~deb11u2","2.42.1-1~deb12u1","2.42.1-2","2.42.2-1","2.42.2-1~deb11u1","2.42.2-1~deb12u1","2.42.3-1","2.42.3-1~deb11u1","2.42.3-1~deb12u1","2.42.4-1","2.42.4-1~deb11u1","2.42.4-1~deb12u1","2.42.5-1","2.42.5-1~deb11u1","2.42.5-1~deb12u1","2.42.5-2","2.43.1-1","2.43.2-1","2.43.3-1","2.43.4-1","2.43.4-2","2.44.0-1","2.44.0-2","2.44.1-1","2.44.1-1~deb11u1","2.44.1-1~deb12u1","2.44.2-1","2.44.2-1~deb11u1","2.44.2-1~deb12u1","2.44.3-1","2.44.3-1~deb11u1","2.44.3-1~deb12u1","2.44.4-1","2.45.1-1","2.45.1-2","2.45.2-1","2.45.3-1","2.45.4-1","2.45.5-1","2.45.6-1","2.45.91-1","2.45.92-1","2.46.0-1","2.46.0-2","2.46.0-2~deb12u1","2.46.1-1","2.46.1-2","2.46.1-2~bpo12+1","2.46.2-1","2.46.3-1","2.46.3-1~deb11u1","2.46.3-1~deb11u2","2.46.3-1~deb12u1","2.46.4-1","2.46.4-1~deb11u1","2.46.4-1~deb12u1","2.46.5-1","2.46.5-1+hurd.1","2.46.5-1+hurd.2","2.46.5-1~deb11u1","2.46.5-1~deb12u1","2.46.6-1","2.46.6-1~deb11u1","2.46.6-1~deb12u1","2.47.1-1","2.47.2-1","2.47.3-1","2.47.4-1","2.47.90-1","2.48.0-1","2.48.0-1+alpha","2.48.0-1+hurd.1","2.48.0-1+hurd.2","2.48.0-1~deb12u1","2.48.1-1","2.48.1-2","2.48.1-2~deb12u1","2.48.1-3","2.48.2-1","2.48.3-1","2.48.3-1~deb11u1","2.48.3-1~deb12u1","2.48.5-1","2.48.5-1~deb11u1","2.48.5-1~deb12u1","2.48.5-1~deb13u1","2.48.6-1","2.49.90-1","2.50.0-1","2.50.0-2","2.50.1-1","2.50.1-1~deb11u1","2.50.1-1~deb12u1","2.50.1-1~deb13u1","2.50.2-1~deb11u1"]},{"source":"osv","ecosystem":"Debian:13","package":"webkit2gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.50.2-1~deb13u1"}]}],"versions":["2.48.3-1","2.48.5-1","2.48.5-1~deb11u1","2.48.5-1~deb12u1","2.48.5-1~deb13u1","2.48.6-1","2.49.90-1","2.50.0-1","2.50.0-2","2.50.1-1","2.50.1-1~deb11u1","2.50.1-1~deb12u1","2.50.1-1~deb13u1","2.50.2-1~deb11u1","2.50.2-1~deb12u1"]},{"source":"osv","ecosystem":"Debian:14","package":"webkit2gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.50.2-1"}]}],"versions":["2.48.3-1","2.48.5-1","2.48.5-1~deb11u1","2.48.5-1~deb12u1","2.48.5-1~deb13u1","2.48.6-1","2.49.90-1","2.50.0-1","2.50.0-2","2.50.1-1","2.50.1-1~deb11u1","2.50.1-1~deb12u1","2.50.1-1~deb13u1","2.50.2-1~deb11u1","2.50.2-1~deb12u1","2.50.2-1~deb13u1"]},{"source":"osv","ecosystem":"Debian:12","package":"wpewebkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.38.6-1","2.39.91-1","2.40.0-1","2.40.1-1","2.40.2-1","2.40.2-2","2.40.3-1","2.40.4-1","2.40.5-1","2.42.0-1","2.42.1-1","2.42.2-1","2.42.3-1","2.42.4-1","2.42.5-1","2.42.5-1.1","2.42.5-1.1~exp1","2.42.5-1.2","2.42.5-2~exp","2.44.1-1","2.44.2-1","2.44.2-2","2.44.3-1","2.44.4-1","2.46.1-1","2.46.2-1","2.46.3-1","2.46.4-1","2.46.5-1","2.46.6-1","2.48.0-1","2.48.1-1","2.48.1-2","2.48.2-1","2.48.3-1","2.48.5-1","2.48.6-1","2.48.6-2","2.50.0-1","2.50.0-2","2.50.1-1","2.50.2-1","2.50.3-1","2.50.4-1","2.50.5-1","2.50.6-1","2.52.0-1","2.52.1-1","2.52.2-1","2.52.2-2","2.52.3-1","2.52.4-1","2.52.5-1","2.52.6-1"]},{"source":"osv","ecosystem":"Debian:13","package":"wpewebkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.48.3-1","2.48.5-1","2.48.6-1","2.48.6-2","2.50.0-1","2.50.0-2","2.50.1-1","2.50.2-1","2.50.3-1","2.50.4-1","2.50.5-1","2.50.6-1","2.52.0-1","2.52.1-1","2.52.2-1","2.52.2-2","2.52.3-1","2.52.4-1","2.52.5-1","2.52.6-1"]},{"source":"osv","ecosystem":"Debian:14","package":"wpewebkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.50.2-1"}]}],"versions":["2.48.3-1","2.48.5-1","2.48.6-1","2.48.6-2","2.50.0-1","2.50.0-2","2.50.1-1"]},{"source":"osv","ecosystem":"Debian:11","package":"webkit2gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.50.2-1~deb11u1"}]}],"versions":["2.32.3-1","2.32.4-1","2.32.4-1~deb10u1","2.32.4-1~deb11u1","2.33.1-1","2.33.2-1","2.33.3-1","2.33.90-1","2.33.91-1","2.34.0-1","2.34.0-1~bpo11+1","2.34.1-1","2.34.1-1~deb10u1","2.34.1-1~deb11u1","2.34.2-1","2.34.2-1~bpo11+1","2.34.3-1","2.34.3-1~deb10u1","2.34.3-1~deb11u1","2.34.4-1","2.34.4-1~deb10u1","2.34.4-1~deb11u1","2.34.5-1","2.34.6-1","2.34.6-1~deb10u1","2.34.6-1~deb11u1","2.35.1-1","2.35.2-1","2.35.3-1","2.35.90-1","2.36.0-1","2.36.0-2","2.36.0-3","2.36.0-3~deb10u1","2.36.0-3~deb11u1","2.36.1-1","2.36.2-1","2.36.3-1","2.36.3-1~deb10u1","2.36.3-1~deb11u1","2.36.4-1","2.36.4-1~deb10u1","2.36.4-1~deb11u1","2.36.6-1","2.36.6-1~deb10u1","2.36.6-1~deb11u1","2.36.7-1","2.36.7-1~deb10u1","2.36.7-1~deb11u1","2.37.1-1","2.37.1-2","2.37.90-1","2.37.91-1","2.38.0-1","2.38.0-1~deb10u1","2.38.0-1~deb11u1","2.38.0-2","2.38.0-3","2.38.1-1","2.38.2-1","2.38.2-1~deb10u1","2.38.2-1~deb11u1","2.38.3-1","2.38.3-1~deb10u1","2.38.3-1~deb11u1","2.38.4-1","2.38.4-2","2.38.4-2~deb10u1","2.38.4-2~deb11u1","2.38.5-1","2.38.5-1+m68k","2.38.5-1~deb10u1","2.38.5-1~deb11u1","2.39.1-1","2.39.2-1","2.39.3-1","2.39.4-1","2.39.5-1","2.39.7-1","2.39.90-1","2.39.91-1","2.40.0-1","2.40.0-2","2.40.0-3","2.40.1-1","2.40.1-1~deb11u1","2.40.2-1","2.40.2-1~deb11u1","2.40.2-1~deb12u1","2.40.3-1","2.40.3-2","2.40.3-2~deb11u1","2.40.3-2~deb11u2","2.40.3-2~deb12u1","2.40.3-2~deb12u2","2.40.4-1","2.40.5-1","2.40.5-1~deb11u1","2.40.5-1~deb12u1","2.41.4-1","2.41.5-1","2.41.6-1","2.41.90-1","2.41.91-1","2.41.91-2","2.41.92-1","2.42.0-1","2.42.0-1~bpo12+1","2.42.1-1","2.42.1-1~bpo12+1","2.42.1-1~deb11u1","2.42.1-1~deb11u2","2.42.1-1~deb12u1","2.42.1-2","2.42.2-1","2.42.2-1~deb11u1","2.42.2-1~deb12u1","2.42.3-1","2.42.3-1~deb11u1","2.42.3-1~deb12u1","2.42.4-1","2.42.4-1~deb11u1","2.42.4-1~deb12u1","2.42.5-1","2.42.5-1~deb11u1","2.42.5-1~deb12u1","2.42.5-2","2.43.1-1","2.43.2-1","2.43.3-1","2.43.4-1","2.43.4-2","2.44.0-1","2.44.0-2","2.44.1-1","2.44.1-1~deb11u1","2.44.1-1~deb12u1","2.44.2-1","2.44.2-1~deb11u1","2.44.2-1~deb12u1","2.44.3-1","2.44.3-1~deb11u1","2.44.3-1~deb12u1","2.44.4-1","2.45.1-1","2.45.1-2","2.45.2-1","2.45.3-1","2.45.4-1","2.45.5-1","2.45.6-1","2.45.91-1","2.45.92-1","2.46.0-1","2.46.0-2","2.46.0-2~deb12u1","2.46.1-1","2.46.1-2","2.46.1-2~bpo12+1","2.46.2-1","2.46.3-1","2.46.3-1~deb11u1","2.46.3-1~deb11u2","2.46.3-1~deb12u1","2.46.4-1","2.46.4-1~deb11u1","2.46.4-1~deb12u1","2.46.5-1","2.46.5-1+hurd.1","2.46.5-1+hurd.2","2.46.5-1~deb11u1","2.46.5-1~deb12u1","2.46.6-1","2.46.6-1~deb11u1","2.46.6-1~deb12u1","2.47.1-1","2.47.2-1","2.47.3-1","2.47.4-1","2.47.90-1","2.48.0-1","2.48.0-1+alpha","2.48.0-1+hurd.1","2.48.0-1+hurd.2","2.48.0-1~deb12u1","2.48.1-1","2.48.1-2","2.48.1-2~deb12u1","2.48.1-3","2.48.2-1","2.48.3-1","2.48.3-1~deb11u1","2.48.3-1~deb12u1","2.48.5-1","2.48.5-1~deb11u1","2.48.5-1~deb12u1","2.48.5-1~deb13u1","2.48.6-1","2.49.90-1","2.50.0-1","2.50.0-2","2.50.1-1","2.50.1-1~deb11u1","2.50.1-1~deb12u1","2.50.1-1~deb13u1"],"bundled":11},{"source":"osv","ecosystem":"Debian:12","package":"webkit2gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.50.2-1~deb12u1"}]}],"versions":["2.40.1-1","2.40.2-1","2.40.2-1~deb11u1","2.40.2-1~deb12u1","2.40.3-1","2.40.3-2","2.40.3-2~deb11u1","2.40.3-2~deb11u2","2.40.3-2~deb12u1","2.40.3-2~deb12u2","2.40.4-1","2.40.5-1","2.40.5-1~deb11u1","2.40.5-1~deb12u1","2.41.4-1","2.41.5-1","2.41.6-1","2.41.90-1","2.41.91-1","2.41.91-2","2.41.92-1","2.42.0-1","2.42.0-1~bpo12+1","2.42.1-1","2.42.1-1~bpo12+1","2.42.1-1~deb11u1","2.42.1-1~deb11u2","2.42.1-1~deb12u1","2.42.1-2","2.42.2-1","2.42.2-1~deb11u1","2.42.2-1~deb12u1","2.42.3-1","2.42.3-1~deb11u1","2.42.3-1~deb12u1","2.42.4-1","2.42.4-1~deb11u1","2.42.4-1~deb12u1","2.42.5-1","2.42.5-1~deb11u1","2.42.5-1~deb12u1","2.42.5-2","2.43.1-1","2.43.2-1","2.43.3-1","2.43.4-1","2.43.4-2","2.44.0-1","2.44.0-2","2.44.1-1","2.44.1-1~deb11u1","2.44.1-1~deb12u1","2.44.2-1","2.44.2-1~deb11u1","2.44.2-1~deb12u1","2.44.3-1","2.44.3-1~deb11u1","2.44.3-1~deb12u1","2.44.4-1","2.45.1-1","2.45.1-2","2.45.2-1","2.45.3-1","2.45.4-1","2.45.5-1","2.45.6-1","2.45.91-1","2.45.92-1","2.46.0-1","2.46.0-2","2.46.0-2~deb12u1","2.46.1-1","2.46.1-2","2.46.1-2~bpo12+1","2.46.2-1","2.46.3-1","2.46.3-1~deb11u1","2.46.3-1~deb11u2","2.46.3-1~deb12u1","2.46.4-1","2.46.4-1~deb11u1","2.46.4-1~deb12u1","2.46.5-1","2.46.5-1+hurd.1","2.46.5-1+hurd.2","2.46.5-1~deb11u1","2.46.5-1~deb12u1","2.46.6-1","2.46.6-1~deb11u1","2.46.6-1~deb12u1","2.47.1-1","2.47.2-1","2.47.3-1","2.47.4-1","2.47.90-1","2.48.0-1","2.48.0-1+alpha","2.48.0-1+hurd.1","2.48.0-1+hurd.2","2.48.0-1~deb12u1","2.48.1-1","2.48.1-2","2.48.1-2~deb12u1","2.48.1-3","2.48.2-1","2.48.3-1","2.48.3-1~deb11u1","2.48.3-1~deb12u1","2.48.5-1","2.48.5-1~deb11u1","2.48.5-1~deb12u1","2.48.5-1~deb13u1","2.48.6-1","2.49.90-1","2.50.0-1","2.50.0-2","2.50.1-1","2.50.1-1~deb11u1","2.50.1-1~deb12u1","2.50.1-1~deb13u1","2.50.2-1~deb11u1"],"bundled":11},{"source":"osv","ecosystem":"Debian:13","package":"webkit2gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.50.2-1~deb13u1"}]}],"versions":["2.48.3-1","2.48.5-1","2.48.5-1~deb11u1","2.48.5-1~deb12u1","2.48.5-1~deb13u1","2.48.6-1","2.49.90-1","2.50.0-1","2.50.0-2","2.50.1-1","2.50.1-1~deb11u1","2.50.1-1~deb12u1","2.50.1-1~deb13u1","2.50.2-1~deb11u1","2.50.2-1~deb12u1"],"bundled":11},{"source":"osv","ecosystem":"Mageia:9","package":"webkit2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.50.2-1.mga9"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.50.3-1.el8_10"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"webkit2gtk3-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.50.3-1.el8_10"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"webkit2gtk3-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.50.3-1.el8_10"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"webkit2gtk3-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.50.3-1.el8_10"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"webkit2gtk3-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.50.3-1.el8_10"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"webkit2gtk3-jsc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.50.3-1.el8_10"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"webkit2gtk3-jsc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.50.3-1.el8_10"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"webkit2gtk3-jsc-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.50.3-1.el8_10"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"webkit2gtk3-jsc-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.50.3-1.el8_10"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.50.3-1.el9_7"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"webkit2gtk3-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.50.3-1.el9_7"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"webkit2gtk3-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.50.3-1.el9_7"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"webkit2gtk3-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.50.3-1.el9_7"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"webkit2gtk3-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.50.3-1.el9_7"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"webkit2gtk3-jsc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.50.3-1.el9_7"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"webkit2gtk3-jsc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.50.3-1.el9_7"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"webkit2gtk3-jsc-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.50.3-1.el9_7"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"webkit2gtk3-jsc-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.50.3-1.el9_7"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.50.3-1.el9_6"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"webkit2gtk3-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.50.3-1.el9_6"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"webkit2gtk3-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.50.3-1.el9_6"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"webkit2gtk3-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.50.3-1.el9_6"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"webkit2gtk3-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.50.3-1.el9_6"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"webkit2gtk3-jsc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.50.3-1.el9_6"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"webkit2gtk3-jsc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.50.3-1.el9_6"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"webkit2gtk3-jsc-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.50.3-1.el9_6"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"webkit2gtk3-jsc-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.50.3-1.el9_6"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.50.3-2.el8_2"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"webkit2gtk3-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.50.3-2.el8_2"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"webkit2gtk3-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.50.3-2.el8_2"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"webkit2gtk3-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.50.3-2.el8_2"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"webkit2gtk3-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.50.3-2.el8_2"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"webkit2gtk3-jsc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.50.3-2.el8_2"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"webkit2gtk3-jsc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.50.3-2.el8_2"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"webkit2gtk3-jsc-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.50.3-2.el8_2"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"webkit2gtk3-jsc-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.50.3-2.el8_2"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.50.3-2.el8_4"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"webkit2gtk3-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.50.3-2.el8_4"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"webkit2gtk3-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.50.3-2.el8_4"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"webkit2gtk3-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.50.3-2.el8_4"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"webkit2gtk3-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.50.3-2.el8_4"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"webkit2gtk3-jsc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.50.3-2.el8_4"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"webkit2gtk3-jsc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.50.3-2.el8_4"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"webkit2gtk3-jsc-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.50.3-2.el8_4"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"webkit2gtk3-jsc-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.50.3-2.el8_4"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.50.3-2.el8_4"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"webkit2gtk3-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.50.3-2.el8_4"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"webkit2gtk3-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.50.3-2.el8_4"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"webkit2gtk3-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.50.3-2.el8_4"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"webkit2gtk3-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.50.3-2.el8_4"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"webkit2gtk3-jsc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.50.3-2.el8_4"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"webkit2gtk3-jsc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.50.3-2.el8_4"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"webkit2gtk3-jsc-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.50.3-2.el8_4"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"webkit2gtk3-jsc-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.50.3-2.el8_4"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.50.3-1.el9_2"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"webkit2gtk3-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.50.3-1.el9_2"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"webkit2gtk3-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.50.3-1.el9_2"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"webkit2gtk3-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.50.3-1.el9_2"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"webkit2gtk3-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.50.3-1.el9_2"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"webkit2gtk3-jsc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.50.3-1.el9_2"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"webkit2gtk3-jsc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.50.3-1.el9_2"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"webkit2gtk3-jsc-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.50.3-1.el9_2"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"webkit2gtk3-jsc-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.50.3-1.el9_2"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.50.3-1.el9_0"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"webkit2gtk3-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.50.3-1.el9_0"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"webkit2gtk3-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.50.3-1.el9_0"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"webkit2gtk3-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.50.3-1.el9_0"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"webkit2gtk3-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.50.3-1.el9_0"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"webkit2gtk3-jsc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.50.3-1.el9_0"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"webkit2gtk3-jsc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.50.3-1.el9_0"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"webkit2gtk3-jsc-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.50.3-1.el9_0"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"webkit2gtk3-jsc-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.50.3-1.el9_0"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"webkitgtk4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.50.3-2.el7_9"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"webkitgtk4-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.50.3-2.el7_9"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"webkitgtk4-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.50.3-2.el7_9"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"webkitgtk4-jsc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.50.3-2.el7_9"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"webkitgtk4-jsc-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.50.3-2.el7_9"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"webkitgtk4-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.50.3-2.el7_9"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.50.3-1.el9_4"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"webkit2gtk3-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.50.3-1.el9_4"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"webkit2gtk3-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.50.3-1.el9_4"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"webkit2gtk3-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.50.3-1.el9_4"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"webkit2gtk3-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.50.3-1.el9_4"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"webkit2gtk3-jsc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.50.3-1.el9_4"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"webkit2gtk3-jsc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.50.3-1.el9_4"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"webkit2gtk3-jsc-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.50.3-1.el9_4"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"webkit2gtk3-jsc-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.50.3-1.el9_4"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.50.3-2.el8_8"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"webkit2gtk3-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.50.3-2.el8_8"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"webkit2gtk3-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.50.3-2.el8_8"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"webkit2gtk3-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.50.3-2.el8_8"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"webkit2gtk3-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.50.3-2.el8_8"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"webkit2gtk3-jsc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.50.3-2.el8_8"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"webkit2gtk3-jsc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.50.3-2.el8_8"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"webkit2gtk3-jsc-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.50.3-2.el8_8"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"webkit2gtk3-jsc-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.50.3-2.el8_8"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.50.3-2.el8_8"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"webkit2gtk3-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.50.3-2.el8_8"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"webkit2gtk3-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.50.3-2.el8_8"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"webkit2gtk3-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.50.3-2.el8_8"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"webkit2gtk3-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.50.3-2.el8_8"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"webkit2gtk3-jsc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.50.3-2.el8_8"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"webkit2gtk3-jsc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.50.3-2.el8_8"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"webkit2gtk3-jsc-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.50.3-2.el8_8"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"webkit2gtk3-jsc-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.50.3-2.el8_8"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.50.3-2.el8_6"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"webkit2gtk3-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.50.3-2.el8_6"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"webkit2gtk3-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.50.3-2.el8_6"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"webkit2gtk3-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.50.3-2.el8_6"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"webkit2gtk3-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.50.3-2.el8_6"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"webkit2gtk3-jsc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.50.3-2.el8_6"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"webkit2gtk3-jsc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.50.3-2.el8_6"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"webkit2gtk3-jsc-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.50.3-2.el8_6"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"webkit2gtk3-jsc-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.50.3-2.el8_6"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.50.3-2.el8_6"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"webkit2gtk3-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.50.3-2.el8_6"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"webkit2gtk3-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.50.3-2.el8_6"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"webkit2gtk3-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.50.3-2.el8_6"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"webkit2gtk3-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.50.3-2.el8_6"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"webkit2gtk3-jsc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.50.3-2.el8_6"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"webkit2gtk3-jsc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.50.3-2.el8_6"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"webkit2gtk3-jsc-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.50.3-2.el8_6"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"webkit2gtk3-jsc-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.50.3-2.el8_6"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.50.3-2.el8_6"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"webkit2gtk3-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.50.3-2.el8_6"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"webkit2gtk3-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.50.3-2.el8_6"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"webkit2gtk3-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.50.3-2.el8_6"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"webkit2gtk3-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.50.3-2.el8_6"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"webkit2gtk3-jsc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.50.3-2.el8_6"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"webkit2gtk3-jsc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.50.3-2.el8_6"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"webkit2gtk3-jsc-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.50.3-2.el8_6"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"webkit2gtk3-jsc-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.50.3-2.el8_6"}]}],"bundled":18},{"source":"osv","ecosystem":"Rocky Linux:8","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.50.3-1.el8_10"}]}],"bundled":18},{"source":"osv","ecosystem":"Rocky Linux:9","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.50.3-1.el9_7"}]}],"bundled":18},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.50.3-150400.4.130.4"}]}],"bundled":18},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"webkit2gtk3-soup2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.50.3-150400.4.130.4"}]}],"bundled":18},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"webkit2gtk4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.50.3-150400.4.130.4"}]}],"bundled":18},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.50.3-150400.4.130.4"}]}],"bundled":18},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"webkit2gtk3-soup2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.50.3-150400.4.130.4"}]}],"bundled":18},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"webkit2gtk4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.50.3-150400.4.130.4"}]}],"bundled":18},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.50.3-150400.4.130.4"}]}],"bundled":18},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"webkit2gtk3-soup2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.50.3-150400.4.130.4"}]}],"bundled":18},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"webkit2gtk4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.50.3-150400.4.130.4"}]}],"bundled":18},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.50.3-150400.4.130.4"}]}],"bundled":18},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"webkit2gtk3-soup2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.50.3-150400.4.130.4"}]}],"bundled":18},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"webkit2gtk4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.50.3-150400.4.130.4"}]}],"bundled":18},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.50.3-150400.4.130.4"}]}],"bundled":18},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"webkit2gtk3-soup2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.50.3-150400.4.130.4"}]}],"bundled":18},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"webkit2gtk4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.50.3-150400.4.130.4"}]}],"bundled":18},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.50.3-150400.4.130.4"}]}],"bundled":18},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"webkit2gtk3-soup2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.50.3-150400.4.130.4"}]}],"bundled":18},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"webkit2gtk4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.50.3-150400.4.130.4"}]}],"bundled":18},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.50.3-150400.4.130.4"}]}],"bundled":18},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"webkit2gtk3-soup2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.50.3-150400.4.130.4"}]}],"bundled":18},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"webkit2gtk4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.50.3-150400.4.130.4"}]}],"bundled":18},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.50.3-150400.4.130.4"}]}],"bundled":18},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"webkit2gtk3-soup2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.50.3-150400.4.130.4"}]}],"bundled":18},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"webkit2gtk4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.50.3-150400.4.130.4"}]}],"bundled":18},{"source":"osv","ecosystem":"SUSE:Manager Proxy LTS 4.3","package":"webkit2gtk3-soup2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.50.3-150400.4.130.4"}]}],"bundled":18},{"source":"osv","ecosystem":"SUSE:Manager Server LTS 4.3","package":"webkit2gtk3-soup2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.50.3-150400.4.130.4"}]}],"bundled":18},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.50.3-4.47.1"}]}],"bundled":18},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.50.3-4.47.1"}]}],"bundled":18},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP6","package":"webkit2gtk3-soup2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.50.4-150600.12.54.1"}]}],"bundled":25},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP6","package":"webkit2gtk4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.50.4-150600.12.54.1"}]}],"bundled":25},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"webkit2gtk3-soup2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.50.4-150600.12.54.1"}]}],"bundled":25},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"webkit2gtk4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.50.4-150600.12.54.1"}]}],"bundled":25},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP6","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.50.4-150600.12.54.1"}]}],"bundled":25},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP7","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.50.4-150600.12.54.1"}]}],"bundled":25},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP6","package":"webkit2gtk4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.50.4-150600.12.54.1"}]}],"bundled":25},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP7","package":"webkit2gtk4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.50.4-150600.12.54.1"}]}],"bundled":25},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.50.4-150600.12.54.1"}]}],"bundled":25},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"webkit2gtk3-soup2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.50.4-150600.12.54.1"}]}],"bundled":25},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"webkit2gtk4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.50.4-150600.12.54.1"}]}],"bundled":25},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.50.4-150600.12.54.1"}]}],"bundled":25},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6","package":"webkit2gtk3-soup2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.50.4-150600.12.54.1"}]}],"bundled":25},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6","package":"webkit2gtk4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.50.4-150600.12.54.1"}]}],"bundled":25},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.50.4-150600.12.54.1"}]}],"bundled":25},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"webkit2gtk3-soup2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.50.4-150600.12.54.1"}]}],"bundled":25},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"webkit2gtk4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.50.4-150600.12.54.1"}]}],"bundled":25},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.50.4-160000.1.1"}]}],"bundled":30},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"webkit2gtk4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.50.4-160000.1.1"}]}],"bundled":30},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.50.4-160000.1.1"}]}],"bundled":30},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"webkit2gtk4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.50.4-160000.1.1"}]}],"bundled":30},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"qtwebkit-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.2+dfsg-1ubuntu2.1","5.5.1+dfsg-2ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"webkit2gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.8.5+dfsg1-3","2.10.3+dfsg1-1","2.10.4+dfsg1-1","2.10.5-1","2.10.6-1","2.10.6-1ubuntu1","2.10.8-1ubuntu1","2.10.9-1ubuntu1","2.12.5-0ubuntu0.16.04.1","2.14.2-0ubuntu0.16.04.1","2.14.3-0ubuntu0.16.04.1","2.14.5-0ubuntu0.16.04.1","2.16.1-0ubuntu0.16.04.1","2.16.1-0ubuntu0.16.04.2","2.16.2-0ubuntu0.16.04.1","2.16.3-0ubuntu0.16.04.1","2.16.6-0ubuntu0.16.04.1","2.18.0-0ubuntu0.16.04.2","2.18.3-0ubuntu0.16.04.1","2.18.4-0ubuntu0.16.04.1","2.18.5-0ubuntu0.16.04.1","2.18.6-0ubuntu0.16.04.1","2.20.1-0ubuntu0.16.04.1","2.20.2-0ubuntu0.16.04.1","2.20.3-0ubuntu0.16.04.1","2.20.5-0ubuntu0.16.04.1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"qtwebkit-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.3.2-0ubuntu10","2.3.2-0ubuntu11"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"webkitgtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.4.9-2ubuntu2","2.4.10-0ubuntu1","2.4.11-0ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"webkit2gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.18.0-2","2.18.0-2build1","2.18.2-1","2.18.3-1","2.18.4-1","2.18.6-1","2.19.91-1ubuntu1","2.19.92-1","2.20.0-1","2.20.0-2","2.20.0-2ubuntu1","2.20.1-1","2.20.2-0ubuntu0.18.04.1","2.20.3-0ubuntu0.18.04.1","2.20.5-0ubuntu0.18.04.1","2.22.2-0ubuntu0.18.04.1","2.22.2-0ubuntu0.18.04.2","2.22.4-0ubuntu0.18.04.1","2.22.5-0ubuntu0.18.04.1","2.22.6-0ubuntu0.18.04.1","2.24.1-0ubuntu0.18.04.1","2.24.2-0ubuntu0.18.04.1","2.24.4-0ubuntu0.18.04.1","2.26.1-0ubuntu0.18.04.1","2.26.2-0ubuntu0.18.04.1","2.26.3-0ubuntu0.18.04.1","2.26.4-0ubuntu0.18.04.1","2.28.0-0ubuntu0.18.04.3","2.28.1-0ubuntu0.18.04.1","2.28.2-0ubuntu0.18.04.1","2.28.3-0ubuntu0.18.04.1","2.28.4-0ubuntu0.18.04.1","2.30.3-0ubuntu0.18.04.1","2.30.5-0ubuntu0.18.04.1","2.30.6-0ubuntu0.18.04.1","2.32.0-0ubuntu0.18.04.1","2.32.3-0ubuntu0.18.04.1","2.32.4-0ubuntu0.18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"qtwebkit-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.9.1+dfsg-5ubuntu1","5.9.1+dfsg-5ubuntu3","5.212.0~alpha2-5build2","5.212.0~alpha2-5build4","5.212.0~alpha2-7","5.212.0~alpha2-7build2","5.212.0~alpha2-7ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"qtwebkit-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.3.2-0ubuntu13"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"webkitgtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.4.11-3","2.4.11-3ubuntu2","2.4.11-3ubuntu3"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"webkit2gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.26.1-3","2.26.2-1","2.26.3-1ubuntu2","2.26.4-1ubuntu1","2.28.0-1ubuntu2","2.28.1-1","2.28.2-0ubuntu0.20.04.1","2.28.3-0ubuntu0.20.04.1","2.28.4-0ubuntu0.20.04.1","2.30.3-0ubuntu0.20.04.1","2.30.5-0ubuntu0.20.04.1","2.30.6-0ubuntu0.20.04.1","2.32.0-0ubuntu0.20.04.1","2.32.3-0ubuntu0.20.04.1","2.32.4-0ubuntu0.20.04.1","2.34.1-0ubuntu0.20.04.1","2.34.3-0ubuntu0.20.04.1","2.34.4-0ubuntu0.20.04.1","2.34.6-0ubuntu0.20.04.1","2.36.0-0ubuntu0.20.04.3","2.36.2-0ubuntu0.20.04.1","2.36.3-0ubuntu0.20.04.1","2.36.4-0ubuntu0.20.04.1","2.36.6-0ubuntu0.20.04.1","2.36.7-0ubuntu0.20.04.1","2.36.8-0ubuntu0.20.04.1","2.38.2-0ubuntu0.20.04.1","2.38.3-0ubuntu0.20.04.1","2.38.4-0ubuntu0.20.04.2","2.38.5-0ubuntu0.20.04.1","2.38.6-0ubuntu0.20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"qtwebkit-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.212.0~alpha3-3","5.212.0~alpha3-5","5.212.0~alpha3-6","5.212.0~alpha3-7","5.212.0~alpha4-1","5.212.0~alpha4-1ubuntu1","5.212.0~alpha4-1ubuntu2","5.212.0~alpha4-1ubuntu2.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"wpewebkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.26.3-1","2.26.4-1","2.26.4-1build1","2.28.0-1","2.28.1-1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"qtwebkit-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.212.0~alpha4-12","5.212.0~alpha4-13","5.212.0~alpha4-14","5.212.0~alpha4-14build1","5.212.0~alpha4-14ubuntu2","5.212.0~alpha4-15ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"webkit2gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.50.2-0ubuntu0.22.04.2"}]}],"versions":["2.34.0-1ubuntu1","2.34.1-1ubuntu1","2.34.2-1ubuntu1","2.34.3-1","2.35.3-1ubuntu1","2.35.90-1ubuntu1","2.36.0-2ubuntu1","2.36.2-0ubuntu0.22.04.1","2.36.3-0ubuntu0.22.04.1","2.36.4-0ubuntu0.22.04.1","2.36.6-0ubuntu0.22.04.1","2.36.7-0ubuntu0.22.04.1","2.36.8-0ubuntu0.22.04.1","2.38.2-0ubuntu0.22.04.2","2.38.3-0ubuntu0.22.04.1","2.38.4-0ubuntu0.22.04.1","2.38.5-0ubuntu0.22.04.1","2.38.6-0ubuntu0.22.04.1","2.40.4-0ubuntu0.22.04.1","2.40.5-0ubuntu0.22.04.1","2.42.1-0ubuntu0.22.04.1","2.42.2-0ubuntu0.22.04.1","2.42.3-0ubuntu0.22.04.1","2.42.4-0ubuntu0.22.04.1","2.42.5-0ubuntu0.22.04.2","2.44.0-0ubuntu0.22.04.1","2.44.2-0ubuntu0.22.04.1","2.44.3-0ubuntu0.22.04.1","2.46.1-0ubuntu0.22.04.3","2.46.3-0ubuntu0.22.04.1","2.46.4-0ubuntu0.22.04.1","2.46.5-0ubuntu0.22.04.1","2.46.6-0ubuntu0.22.04.1","2.48.0-0ubuntu0.22.04.1","2.48.1-0ubuntu0.22.04.1","2.48.3-0ubuntu0.22.04.1","2.48.5-0ubuntu0.22.04.1","2.48.7-0ubuntu0.22.04.2","2.50.1-0ubuntu0.22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"wpewebkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.32.4-1","2.34.1-1","2.34.2-1","2.34.3-1","2.34.4-1","2.34.5-1","2.34.6-1","2.36.0-2ubuntu2","2.36.0-2ubuntu3"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"qtwebkit-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.212.0~alpha4-33","5.212.0~alpha4-33build1","5.212.0~alpha4-34","5.212.0~alpha4-34ubuntu3","5.212.0~alpha4-34ubuntu4","5.212.0~alpha4-36"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"webkit2gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.50.2-0ubuntu0.24.04.2"}]}],"versions":["2.42.1-2","2.42.2-1","2.42.3-1","2.42.4-1","2.43.3-1","2.43.3-1build2","2.44.0-2","2.44.2-0ubuntu0.24.04.1","2.44.2-0ubuntu0.24.04.2","2.44.3-0ubuntu0.24.04.1","2.46.1-0ubuntu0.24.04.1","2.46.3-0ubuntu0.24.04.1","2.46.4-0ubuntu0.24.04.1","2.46.5-0ubuntu0.24.04.1","2.46.6-0ubuntu0.24.04.1","2.48.0-0ubuntu0.24.04.1","2.48.1-0ubuntu0.24.04.1","2.48.3-0ubuntu0.24.04.1","2.48.5-0ubuntu0.24.04.1","2.48.7-0ubuntu0.24.04.2","2.50.1-0ubuntu0.24.04.1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"webkit2gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.50.2-0ubuntu0.25.10.2"}]}],"versions":["2.48.1-1ubuntu1","2.48.2-1ubuntu1","2.48.2-1ubuntu2","2.48.3-1ubuntu2","2.48.6-1ubuntu2","2.50.0-2ubuntu1","2.50.0-2ubuntu1.1","2.50.1-0ubuntu0.25.10.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"webkit2gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.50.2-0ubuntu0.22.04.2"}]}],"versions":["2.34.0-1ubuntu1","2.34.1-1ubuntu1","2.34.2-1ubuntu1","2.34.3-1","2.35.3-1ubuntu1","2.35.90-1ubuntu1","2.36.0-2ubuntu1","2.36.2-0ubuntu0.22.04.1","2.36.3-0ubuntu0.22.04.1","2.36.4-0ubuntu0.22.04.1","2.36.6-0ubuntu0.22.04.1","2.36.7-0ubuntu0.22.04.1","2.36.8-0ubuntu0.22.04.1","2.38.2-0ubuntu0.22.04.2","2.38.3-0ubuntu0.22.04.1","2.38.4-0ubuntu0.22.04.1","2.38.5-0ubuntu0.22.04.1","2.38.6-0ubuntu0.22.04.1","2.40.4-0ubuntu0.22.04.1","2.40.5-0ubuntu0.22.04.1","2.42.1-0ubuntu0.22.04.1","2.42.2-0ubuntu0.22.04.1","2.42.3-0ubuntu0.22.04.1","2.42.4-0ubuntu0.22.04.1","2.42.5-0ubuntu0.22.04.2","2.44.0-0ubuntu0.22.04.1","2.44.2-0ubuntu0.22.04.1","2.44.3-0ubuntu0.22.04.1","2.46.1-0ubuntu0.22.04.3","2.46.3-0ubuntu0.22.04.1","2.46.4-0ubuntu0.22.04.1","2.46.5-0ubuntu0.22.04.1","2.46.6-0ubuntu0.22.04.1","2.48.0-0ubuntu0.22.04.1","2.48.1-0ubuntu0.22.04.1","2.48.3-0ubuntu0.22.04.1","2.48.5-0ubuntu0.22.04.1","2.48.7-0ubuntu0.22.04.2","2.50.1-0ubuntu0.22.04.1"],"bundled":10},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"webkit2gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.50.2-0ubuntu0.24.04.2"}]}],"versions":["2.42.1-2","2.42.2-1","2.42.3-1","2.42.4-1","2.43.3-1","2.43.3-1build2","2.44.0-2","2.44.2-0ubuntu0.24.04.1","2.44.2-0ubuntu0.24.04.2","2.44.3-0ubuntu0.24.04.1","2.46.1-0ubuntu0.24.04.1","2.46.3-0ubuntu0.24.04.1","2.46.4-0ubuntu0.24.04.1","2.46.5-0ubuntu0.24.04.1","2.46.6-0ubuntu0.24.04.1","2.48.0-0ubuntu0.24.04.1","2.48.1-0ubuntu0.24.04.1","2.48.3-0ubuntu0.24.04.1","2.48.5-0ubuntu0.24.04.1","2.48.7-0ubuntu0.24.04.2","2.50.1-0ubuntu0.24.04.1"],"bundled":10},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"webkit2gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.50.2-0ubuntu0.25.10.2"}]}],"versions":["2.48.1-1ubuntu1","2.48.2-1ubuntu1","2.48.2-1ubuntu2","2.48.3-1ubuntu2","2.48.6-1ubuntu2","2.50.0-2ubuntu1","2.50.0-2ubuntu1.1","2.50.1-0ubuntu0.25.10.1"],"bundled":10},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.50.4-160000.1.1"}]}],"bundled":30},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"webkit2gtk3-soup2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.50.4-160000.1.1"}]}],"bundled":30},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"webkit2gtk4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.50.4-160000.1.1"}]}],"bundled":30}],"products":[{"vendor":"apple","product":"ios and ipados"},{"vendor":"apple","product":"ipados"},{"vendor":"apple","product":"iphone_os"},{"vendor":"apple","product":"macos"},{"vendor":"apple","product":"safari"},{"vendor":"apple","product":"tvos"},{"vendor":"apple","product":"visionos"},{"vendor":"apple","product":"watchos"}],"references":[{"url":"https://support.apple.com/en-us/125632","tags":["web"]},{"url":"https://support.apple.com/en-us/125633","tags":["web"]},{"url":"https://support.apple.com/en-us/125634","tags":["web"]},{"url":"https://support.apple.com/en-us/125637","tags":["web"]},{"url":"https://support.apple.com/en-us/125638","tags":["web"]},{"url":"https://support.apple.com/en-us/125639","tags":["web"]},{"url":"https://support.apple.com/en-us/125640","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-43392","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-mcgq-5c2q-chc3"},{"url":"https://access.redhat.com/errata/RHSA-2025:22789","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-43000","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-13502","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-13947","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-43392","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-43419","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-43421","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-43425","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-43427","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-43429","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-43430","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-43431","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-43432","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-43434","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-43440","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-43443","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-43458","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-43480","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-66287","tags":["report"]},{"url":"https://bugzilla.redhat.com/2416300","tags":["report"]},{"url":"https://bugzilla.redhat.com/2416324","tags":["report"]},{"url":"https://bugzilla.redhat.com/2416325","tags":["report"]},{"url":"https://bugzilla.redhat.com/2416326","tags":["report"]},{"url":"https://bugzilla.redhat.com/2416327","tags":["report"]},{"url":"https://bugzilla.redhat.com/2416329","tags":["report"]},{"url":"https://bugzilla.redhat.com/2416330","tags":["report"]},{"url":"https://bugzilla.redhat.com/2416331","tags":["report"]},{"url":"https://bugzilla.redhat.com/2416332","tags":["report"]},{"url":"https://bugzilla.redhat.com/2416334","tags":["report"]},{"url":"https://bugzilla.redhat.com/2416335","tags":["report"]},{"url":"https://bugzilla.redhat.com/2416336","tags":["report"]},{"url":"https://bugzilla.redhat.com/2416337","tags":["report"]},{"url":"https://bugzilla.redhat.com/2416338","tags":["report"]},{"url":"https://bugzilla.redhat.com/2416355","tags":["report"]},{"url":"https://bugzilla.redhat.com/2418576","tags":["report"]},{"url":"https://bugzilla.redhat.com/2418855","tags":["report"]},{"url":"https://bugzilla.redhat.com/2418857","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2025-22789.html","tags":["advisory"]},{"url":"https://www.redhat.com/security/data/cve/CVE-2025-43433.html","tags":["report"]},{"url":"https://www.redhat.com/security/data/cve/CVE-2025-43438.html","tags":["report"]},{"url":"https://www.redhat.com/security/data/cve/CVE-2025-43441.html","tags":["report"]},{"url":"https://access.redhat.com/errata/RHSA-2025:22790","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALSA-2025-22790.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2025-1766568231.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2025-1767001828.html","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2025-43392","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2025-0319.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=34792","tags":["report"]},{"url":"https://webkitgtk.org/security/WSA-2025-0008.html","tags":["web","article","report"]},{"url":"https://webkitgtk.org/2025/11/19/webkitgtk2.50.2-released.html","tags":["web"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2416300","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2416325","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2416327","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2416329","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2416330","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2416331","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2416332","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2416334","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2416335","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2416336","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2416337","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2416355","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2418576","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2418855","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2418857","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_22789.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-13502","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-13502","tags":["advisory"]},{"url":"https://bugs.webkit.org/show_bug.cgi?id=302218","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-13947","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-13947","tags":["advisory"]},{"url":"https://bugs.webkit.org/show_bug.cgi?id=271957","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-43392","tags":["advisory","report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-43421","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-43421","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-43425","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-43425","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-43427","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-43427","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-43429","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-43429","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-43430","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-43430","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-43431","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-43431","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-43432","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-43432","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-43433","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2448783","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-43433","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-43433","tags":["advisory"]},{"url":"https://webkitgtk.org/security/WSA-2026-0001.html","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-43434","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-43434","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-43438","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2448784","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-43438","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-43438","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-43440","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-43440","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-43441","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2448785","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-43441","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-43441","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-43443","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-43443","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-43458","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-43458","tags":["advisory"]},{"url":"https://webkitgtk.org/security/WSA-2025-0009.html","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-66287","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-66287","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_22790.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:23110","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_23110.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:23433","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_23433.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:23434","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_23434.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:23451","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_23451.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:23452","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_23452.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:23583","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_23583.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:23591","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_23591.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:23742","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_23742.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:23743","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_23743.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2025:22789","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2416324","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2416326","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2416338","tags":["report"]},{"url":"https://errata.rockylinux.org/RLSA-2025:22790","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20254416-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1254164","tags":["report"]},{"url":"https://bugzilla.suse.com/1254165","tags":["report"]},{"url":"https://bugzilla.suse.com/1254166","tags":["report"]},{"url":"https://bugzilla.suse.com/1254167","tags":["report"]},{"url":"https://bugzilla.suse.com/1254168","tags":["report"]},{"url":"https://bugzilla.suse.com/1254169","tags":["report"]},{"url":"https://bugzilla.suse.com/1254170","tags":["report"]},{"url":"https://bugzilla.suse.com/1254171","tags":["report"]},{"url":"https://bugzilla.suse.com/1254172","tags":["report"]},{"url":"https://bugzilla.suse.com/1254174","tags":["report"]},{"url":"https://bugzilla.suse.com/1254175","tags":["report"]},{"url":"https://bugzilla.suse.com/1254176","tags":["report"]},{"url":"https://bugzilla.suse.com/1254177","tags":["report"]},{"url":"https://bugzilla.suse.com/1254179","tags":["report"]},{"url":"https://bugzilla.suse.com/1254208","tags":["report"]},{"url":"https://bugzilla.suse.com/1254473","tags":["report"]},{"url":"https://bugzilla.suse.com/1254498","tags":["report"]},{"url":"https://bugzilla.suse.com/1254509","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2023-43000","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-13502","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-13947","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-43392","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-43419","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-43421","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-43425","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-43427","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-43429","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-43430","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-43431","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-43432","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-43434","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-43440","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-43443","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-43458","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-43480","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-66287","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20254423-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20260021-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1255183","tags":["report"]},{"url":"https://bugzilla.suse.com/1255191","tags":["report"]},{"url":"https://bugzilla.suse.com/1255194","tags":["report"]},{"url":"https://bugzilla.suse.com/1255195","tags":["report"]},{"url":"https://bugzilla.suse.com/1255198","tags":["report"]},{"url":"https://bugzilla.suse.com/1255200","tags":["report"]},{"url":"https://bugzilla.suse.com/1255497","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-14174","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-43501","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-43529","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-43531","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-43535","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-43536","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-43541","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202620102-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1250439","tags":["report"]},{"url":"https://bugzilla.suse.com/1250440","tags":["report"]},{"url":"https://bugzilla.suse.com/1250441","tags":["report"]},{"url":"https://bugzilla.suse.com/1250442","tags":["report"]},{"url":"https://bugzilla.suse.com/1251975","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-43272","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-43342","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-43343","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-43356","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-43368","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2025-43392","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-7914-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2025-43425","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-43427","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-43429","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-43430","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-43431","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-43432","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-43434","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-43440","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-43443","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2025-43392","description":"The issue was addressed with improved handling of caches. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. A website may exfiltrate image data cross-origin.","status":"published","published":"2025-11-04T01:15:34.041Z","modified":"2026-04-02T18:09:43.42Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","level":"medium","assessor":"adp"}],"cwes":["CWE-942"],"updated_at":"2026-11-02T14:32:27.28543Z"}],"euvd":[{"id":"EUVD-2025-37699","description":"The issue was addressed with improved handling of caches. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. A website may exfiltrate image data cross-origin.","status":"published","published":"2025-11-04T01:15:34Z","modified":"2026-04-02T18:09:43Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T19:25:21.737325Z"}],"ghsa":[{"id":"GHSA-mcgq-5c2q-chc3","title":"The issue was addressed with improved handling of caches. This issue is fixed in Safari 26.1,...","description":"The issue was addressed with improved handling of caches. This issue is fixed in Safari 26.1, visionOS 26.1, watchOS 26.1, iOS 26.1 and iPadOS 26.1, tvOS 26.1. A website may exfiltrate image data cross-origin.","status":"published","published":"2025-11-04T03:30:27Z","modified":"2025-12-17T21:31:42Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"cwes":["CWE-524","CWE-942"],"updated_at":"2026-11-02T15:05:15.153655Z"}],"nvd":[{"id":"CVE-2025-43392","description":"The issue was addressed with improved handling of caches. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. A website may exfiltrate image data cross-origin.","status":"published","published":"2025-11-04T02:15:46.083Z","modified":"2026-06-17T09:23:54.477Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-942"],"updated_at":"2026-11-02T14:11:41.607433Z"}],"osv":[{"id":"CVE-2025-43392","description":"The issue was addressed with improved handling of caches. This issue is fixed in tvOS 26.1, watchOS 26.1, macOS Tahoe 26.1, iOS 26.1 and iPadOS 26.1, Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, visionOS 26.1. A website may exfiltrate image data cross-origin.","status":"published","published":"2025-11-04T02:15:46.083Z","modified":"2026-04-16T04:35:40.154396468Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:44:49.394967Z"},{"id":"DEBIAN-CVE-2025-43392","description":"The issue was addressed with improved handling of caches. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. A website may exfiltrate image data cross-origin.","status":"published","published":"2025-11-04T02:15:46.083Z","modified":"2026-09-01T20:05:52.567899517Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:45:47.378563Z"},{"id":"RHSA-2025:22789","title":"Red Hat Security Advisory: webkit2gtk3 security update","status":"published","published":"2025-12-08T10:03:55Z","modified":"2026-10-17T10:05:57Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:16.589982Z"},{"id":"RHSA-2025:22790","title":"Red Hat Security Advisory: webkit2gtk3 security update","status":"published","published":"2025-12-08T10:03:56Z","modified":"2026-10-17T10:05:58Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:16.589982Z"},{"id":"RHSA-2025:23110","title":"Red Hat Security Advisory: webkit2gtk3 security update","status":"published","published":"2025-12-12T10:07:45Z","modified":"2026-10-17T10:06:05Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:16.589982Z"},{"id":"RHSA-2025:23433","title":"Red Hat Security Advisory: webkit2gtk3 security update","status":"published","published":"2025-12-18T10:09:22Z","modified":"2026-10-17T10:06:12Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:16.589982Z"},{"id":"RHSA-2025:23434","title":"Red Hat Security Advisory: webkit2gtk3 security update","status":"published","published":"2025-12-17T10:08:31Z","modified":"2026-10-17T10:06:13Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:16.589982Z"},{"id":"RHSA-2025:23451","title":"Red Hat Security Advisory: webkit2gtk3 security update","status":"published","published":"2025-12-18T10:09:25Z","modified":"2026-10-17T10:06:14Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:16.589982Z"},{"id":"RHSA-2025:23452","title":"Red Hat Security Advisory: webkit2gtk3 security update","status":"published","published":"2025-12-18T10:09:26Z","modified":"2026-10-17T10:06:14Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:16.589982Z"},{"id":"RHSA-2025:23583","title":"Red Hat Security Advisory: webkitgtk4 security update","status":"published","published":"2025-12-19T10:09:56Z","modified":"2026-10-17T10:06:16Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:16.589982Z"},{"id":"RHSA-2025:23591","title":"Red Hat Security Advisory: webkit2gtk3 security update","status":"published","published":"2025-12-18T10:09:33Z","modified":"2026-10-17T10:06:16Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:16.589982Z"},{"id":"RHSA-2025:23742","title":"Red Hat Security Advisory: webkit2gtk3 security update","status":"published","published":"2025-12-22T10:02:56Z","modified":"2026-10-17T10:06:20Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:16.589982Z"},{"id":"RHSA-2025:23743","title":"Red Hat Security Advisory: webkit2gtk3 security update","status":"published","published":"2025-12-22T10:02:57Z","modified":"2026-10-17T10:06:20Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:16.589982Z"},{"id":"RLSA-2025:22789","title":"Important: webkit2gtk3 security update","description":"WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.\n\nSecurity Fix(es):\n\n* webkit: WebKitGTK / WPE WebKit: Out-of-bounds read and integer underflow vulnerability leading to DoS (CVE-2025-13502)\n\n* webkitgtk: Processing maliciously crafted web content may lead to memory corruption (CVE-2023-43000)\n\n* webkitgtk: A website may exfiltrate image data cross-origin (CVE-2025-43392)\n\n* webkitgtk: Processing maliciously crafted web content may lead to memory corruption (CVE-2025-43419)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43425)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43427)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43429)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43430)\n\n* webkitgtk: Processing maliciously crafted web content may lead to memory corruption (CVE-2025-43431)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43432)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2025-43434)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43440)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43443)\n\n* webkitgtk: A malicious website may exfiltrate data cross-origin (CVE-2025-43480)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43421)\n\n* webkit: WebKitGTK: Remote user-assisted information disclosure via file drag-and-drop (CVE-2025-13947)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43458)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-66287)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2025-12-09T09:02:00.929297Z","modified":"2025-12-09T09:32:54.75973Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:25.216873Z"},{"id":"RLSA-2025:22790","title":"Important: webkit2gtk3 security update","description":"WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.\n\nSecurity Fix(es):\n\n* webkit: WebKitGTK / WPE WebKit: Out-of-bounds read and integer underflow vulnerability leading to DoS (CVE-2025-13502)\n\n* webkitgtk: Processing maliciously crafted web content may lead to memory corruption (CVE-2023-43000)\n\n* webkitgtk: A website may exfiltrate image data cross-origin (CVE-2025-43392)\n\n* webkitgtk: Processing maliciously crafted web content may lead to memory corruption (CVE-2025-43419)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43425)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43427)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43429)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43430)\n\n* webkitgtk: Processing maliciously crafted web content may lead to memory corruption (CVE-2025-43431)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43432)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2025-43434)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43440)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43443)\n\n* webkitgtk: A malicious website may exfiltrate data cross-origin (CVE-2025-43480)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43421)\n\n* webkit: WebKitGTK: Remote user-assisted information disclosure via file drag-and-drop (CVE-2025-13947)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43458)\n\n* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-66287)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2025-12-09T09:03:58.586203Z","modified":"2025-12-09T09:32:55.314954Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:25.216873Z"},{"id":"UBUNTU-CVE-2025-43392","description":"The issue was addressed with improved handling of caches. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. A website may exfiltrate image data cross-origin.","status":"published","published":"2025-11-04T02:15:00Z","modified":"2026-10-28T20:15:41.802963818Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T16:55:46.53147Z"},{"id":"ALSA-2025:22789","title":"Important: webkit2gtk3 security update","description":"WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.  \n\nSecurity Fix(es):  \n\n  * webkit: WebKitGTK / WPE WebKit: Out-of-bounds read and integer underflow vulnerability leading to DoS (CVE-2025-13502)\n  * webkitgtk: Processing maliciously crafted web content may lead to memory corruption (CVE-2023-43000)\n  * webkitgtk: A website may exfiltrate image data cross-origin (CVE-2025-43392)\n  * webkitgtk: Processing maliciously crafted web content may lead to memory corruption (CVE-2025-43419)\n  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43425)\n  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43427)\n  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43429)\n  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43430)\n  * webkitgtk: Processing maliciously crafted web content may lead to memory corruption (CVE-2025-43431)\n  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43432)\n  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2025-43434)\n  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43440)\n  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43443)\n  * webkitgtk: A malicious website may exfiltrate data cross-origin (CVE-2025-43480)\n  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43421)\n  * webkit: WebKitGTK: Remote user-assisted information disclosure via file drag-and-drop (CVE-2025-13947)\n  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43458)\n  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-66287)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2025-12-08T00:00:00Z","modified":"2026-10-29T11:12:04.575453026Z","updated_at":"2026-11-02T15:27:53.448565Z"},{"id":"ALSA-2025:22790","title":"Important: webkit2gtk3 security update","description":"WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.  \n\nSecurity Fix(es):  \n\n  * webkit: WebKitGTK / WPE WebKit: Out-of-bounds read and integer underflow vulnerability leading to DoS (CVE-2025-13502)\n  * webkitgtk: Processing maliciously crafted web content may lead to memory corruption (CVE-2023-43000)\n  * webkitgtk: A website may exfiltrate image data cross-origin (CVE-2025-43392)\n  * webkitgtk: Processing maliciously crafted web content may lead to memory corruption (CVE-2025-43419)\n  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43425)\n  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43427)\n  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43429)\n  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43430)\n  * webkitgtk: Processing maliciously crafted web content may lead to memory corruption (CVE-2025-43431)\n  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43432)\n  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2025-43434)\n  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43440)\n  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43443)\n  * webkitgtk: A malicious website may exfiltrate data cross-origin (CVE-2025-43480)\n  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43421)\n  * webkit: WebKitGTK: Remote user-assisted information disclosure via file drag-and-drop (CVE-2025-13947)\n  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43458)\n  * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-66287)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2025-12-08T00:00:00Z","modified":"2026-10-29T11:32:29.075625113Z","updated_at":"2026-11-02T15:27:53.448565Z"},{"id":"CLSA-2025-1766568231","title":"webkit2gtk3: Fix of CVE-2025-43392","description":"- CVE-2025-43392: fix cross-origin image data leak by correctly tainting\n  OffscreenCanvas when transferring a cross-origin ImageBitmap","status":"published","published":"2025-12-24T20:08:01Z","modified":"2026-06-01T00:31:34.143818368Z","updated_at":"2026-11-02T15:43:42.847264Z"},{"id":"CLSA-2025-1767001828","title":"webkit2gtk3: Fix of 15 CVEs","description":"- Update to 2.50.3\n- Fix multiple security issues that could lead to crashes, memory corruption,\n  or information disclosure when processing malicious web content:\n  - CVE-2025-66287\n  - CVE-2025-43458\n  - CVE-2025-43421\n  - CVE-2025-13947\n- Includes fixes previously released in version 2.50.2:\n  - CVE-2025-13502: fix out-of-bounds read and integer underflow\n  - CVE-2025-43443: fix unexpected process crash from malicious web content\n  - CVE-2025-43440: fix DFG constant folding to skip unreachable blocks\n  - CVE-2025-43434: fix use-after-free in WebAssembly globals and tables\n  - CVE-2025-43432: fix use-after-free in WasmFunctionParser\n  - CVE-2025-43431: fix dangling pointer in WebAssembly struct field types\n  - CVE-2025-43430: fix BBQ JIT writing to incorrect stack slots\n  - CVE-2025-43429: fix insufficient bounds checking in Unicode string handling\n  - CVE-2025-43427: fix wrong jump table state handling that could lead to crashes\n  - CVE-2025-43425: fix DFG node cloning flaw leading to crashes\n  - CVE-2025-43392: fix cross-origin image data leak","status":"published","published":"2026-01-05T15:08:11Z","modified":"2026-10-21T10:45:25.237530888Z","updated_at":"2026-11-02T15:43:42.847264Z"},{"id":"DLA-4394-1","title":"webkit2gtk - security update","status":"published","published":"2025-12-04T00:00:00Z","modified":"2025-12-05T12:32:50.506222Z","updated_at":"2026-11-02T15:46:12.7027Z"},{"id":"DSA-6070-1","title":"webkit2gtk - security update","status":"published","published":"2025-12-04T00:00:00Z","modified":"2026-03-09T02:08:50.685494Z","updated_at":"2026-11-02T15:46:18.296714Z"},{"id":"MGASA-2025-0319","title":"Updated webkit2 packages fix security vulnerabilities","description":"The updated packages fix security vulnerabilities: CVE-2025-43392,\nCVE-2025-43419, CVE-2025-43425, CVE-2025-43427, CVE-2025-43429,\nCVE-2025-43430, CVE-2025-43431, CVE-2025-43432, CVE-2025-43434,\nCVE-2025-43440, CVE-2025-43443, CVE-2025-43421.\n","status":"published","published":"2025-12-04T23:29:13Z","modified":"2026-04-16T04:42:54.523380199Z","updated_at":"2026-11-02T15:49:43.178336Z"},{"id":"openSUSE-SU-2026:20065-1","title":"Security update for webkit2gtk3","description":"This update for webkit2gtk3 fixes the following issues:\n\nUpdate to version 2.50.4.\n\nSecurity issues fixed:\n\n- CVE-2025-13502: processing of maliciously crafted payloads by the GLib remote inspector server may lead to a\n  UIProcess crash due to an out-of-bounds read and an integer underflow (bsc#1254208).\n- CVE-2025-13947: use of the file drag-and-drop mechanism may lead to remote information disclosure due to a lack of\n  verification of the origins of drag operations (bsc#1254473).\n- CVE-2025-14174: processing maliciously crafted web content may lead to memory corruption due to improper validation\n  (bsc#1255497).\n- CVE-2025-43272: processing maliciously crafted web content may lead to an unexpected process crash due to improper\n  memory handling (bsc#1250439).\n- CVE-2025-43342: processing maliciously crafted web content may lead to an unexpected process crash due to a\n  correctness issue and missing checks (bsc#1250440).\n- CVE-2025-43343: processing maliciously crafted web content may lead to an unexpected process crash due to improper\n  memory handling (bsc#1251975).\n- CVE-2025-43356: a website may be able to access sensor information without user consent due to improper cache handling\n  (bsc#1250441).\n- CVE-2025-43368: processing maliciously crafted web content may lead to an unexpected process crash due to a\n  use-after-free issue (bsc#1250442).\n- CVE-2025-43392: websites may exfiltrate image data cross-origin due to issues with cache handling (bsc#1254165).\n- CVE-2025-43419: processing maliciously crafted web content may lead to memory corruption due to improper memory\n  handling (bsc#1254166).\n- CVE-2025-43421: processing maliciously crafted web content may lead to an unexpected process crash due to enabled\n  array allocation sinking (bsc#1254167).\n- CVE-2025-43425: processing maliciously crafted web content may lead to an unexpected process crash due to improper\n  memory handling (bsc#1254168).\n- CVE-2025-43427: processing maliciously crafted web content may lead to an unexpected process crash due to issues with\n  state management (bsc#1254169).\n- CVE-2025-43429: processing maliciously crafted web content may lead to an unexpected process crash due to a buffer\n  overflow issue (bsc#1254174).\n- CVE-2025-43430: processing maliciously crafted web content may lead to an unexpected process crash due to issues with\n  state management (bsc#1254172).\n- CVE-2025-43431: processing maliciously crafted web content may lead to memory corruption due to improper memory\n  handling (bsc#1254170).\n- CVE-2025-43432: processing maliciously crafted web content may lead to an unexpected process crash due to a\n  use-after-free issue (bsc#1254171).\n- CVE-2025-43434: processing maliciously crafted web content may lead to an unexpected process crash due to a\n  use-after-free issue (bsc#1254179).\n- CVE-2025-43440: processing maliciously crafted web content may lead to an unexpected process crash due to missing\n  checks (bsc#1254177).\n- CVE-2025-43443: processing maliciously crafted web content may lead to an unexpected process crash due to missing\n  checks (bsc#1254176).\n- CVE-2025-43458: processing maliciously crafted web content may lead to an unexpected process crash due to issues with\n  state management (bsc#1254498).\n- CVE-2025-43501: processing maliciously crafted web content may lead to an unexpected process crash due to a buffer\n  overflow issue (bsc#1255194).\n- CVE-2025-43529: processing maliciously crafted web content may lead to arbitrary code execution due to a\n  use-after-free issue (bsc#1255198).\n- CVE-2025-43531: processing maliciously crafted web content may lead to an unexpected process crash due to a race\n  condition (bsc#1255183).\n- CVE-2025-43535: processing maliciously crafted web content may lead to an unexpected process crash due to improper\n  memory handling (bsc#1255195).\n- CVE-2025-43536: processing maliciously crafted web content may lead to an unexpected process crash due to a\n  use-after-free issue (bsc#1255200).\n- CVE-2025-43541: processing maliciously crafted web content may lead to an unexpected process crash due to type\n  confusion (bsc#1255191).\n- CVE-2025-66287: processing maliciously crafted web content may lead to an unexpected process crash due to improper\n  memory handling (bsc#1254509).\n\nOther issues fixed and changes:\n\n- Version 2.50.4:\n  * Correctly handle the program name passed to the sleep disabler.\n  * Ensure GStreamer is initialized before using the Quirks.\n  * Fix several crashes and rendering issues.\n\n- Version 2.50.3:\n  * Fix seeking and looping of media elements that set the \"loop\" property.\n  * Fix several crashes and rendering issues.\n\n- Version 2.50.2:\n  * Prevent unsafe URI schemes from participating in media playback.\n  * Make jsc_value_array_buffer_get_data() function introspectable.\n  * Fix logging in to Google accounts that have a WebAuthn second factor configured.\n  * Fix loading webkit://gpu when there are no threads configured for GPU rendering.\n  * Fix rendering gradiants that use the CSS hue interpolation method.\n  * Fix pasting image data from the clipboard.\n  * Fix font-family selection when the font name contains spaces.\n  * Fix the build with standard C libraries that lack execinfo.h, like Musl or uClibc.\n  * Fix capturing canvas snapshots in the Web Inspector.\n  * Fix several crashes and rendering issues.\n\n- Version 2.50.1:\n  * Improve text rendering performance.\n  * Fix audio playback broken on instagram.\n  * Fix rendering of layers with fractional transforms.\n  * Fix the build with ENABLE(VIDEO) disabled.\n  * Fix the build in s390x.\n  * Fix several crashes and rendering issues.\n\n- Version 2.50.0:\n  * Improved rendering performance by recording each layer once and replaying every dirty region in different worker\n    threads.\n  * Enable damage propagation to the UI process by default.\n  * CSS property font-variant-emoji is now enabled by default.\n  * Font synthesis properties (bold/italic) are now properly handled.\n  * Ensure web view is focused on tap gesture.\n  * Added new API to get the theme color of a WebKitWebView.\n\n- Version 2.49.90:\n  * Add support for font collection / fragment identifiers.\n  * Fix web process deadlock on exit.\n  * Fix stuttering when playing WebP animations\n  * Fix CSS animations with cubic-bezier timing function.\n  * Do not start the MemoryPressureMonitor if it’s disabled\n  * Fix several crashes and rendering issues.\n  * Updated translations.\n\n- Version 2.48.6:\n  * Fix emojis incorrectly rendered in their text variant.\n  * Add support for font collection / fragment identifiers.\n  * Fix web process deadlock on exit.\n  * Fix stuttering when playing WebP animations.\n  * Fix CSS animations with cubic-bezier timing function.\n  * Do not start the MemoryPressureMonitor if it's disabled.\n  * Fix several crashes and rendering issues.\n\n- Fix a11y regression where AT-SPI roles were mapped incorrectly.\n- Disable skia on ppc64le.\n\n","status":"published","published":"2026-01-20T12:08:51Z","modified":"2026-03-23T04:54:43.038943Z","updated_at":"2026-11-02T16:58:41.463445Z"},{"id":"SUSE-SU-2025:4416-1","title":"Security update for webkit2gtk3","description":"This update for webkit2gtk3 fixes the following issues:\n\nUpdate to version 2.50.3.\n\nSecurity issues fixed:\n\n- CVE-2025-13502: processing of maliciously crafted payloads by the GLib remote inspector server may lead to a\n  UIProcess crash due to an out-of-bounds read and an integer underflow (bsc#1254208).\n- CVE-2025-13947: use of the file drag-and-drop mechanism may lead to remote information disclosure due to a lack of\n  verification of the origins of drag operations (bsc#1254473).\n- CVE-2025-43392: websites may exfiltrate image data cross-origin due to issues with cache handling (bsc#1254165).\n- CVE-2025-43421: processing maliciously crafted web content may lead to an unexpected process crash due to enabled\n  array allocation sinking (bsc#1254167).\n- CVE-2025-43425: processing maliciously crafted web content may lead to an unexpected process crash due to improper\n  memory handling (bsc#1254168).\n- CVE-2025-43427: processing maliciously crafted web content may lead to an unexpected process crash due to issues with\n  state management (bsc#1254169).\n- CVE-2025-43429: processing maliciously crafted web content may lead to an unexpected process crash due to a buffer\n  overflow issue (bsc#1254174).\n- CVE-2025-43430: processing maliciously crafted web content may lead to an unexpected process crash due to issues with\n  state management (bsc#1254172).\n- CVE-2025-43431: processing maliciously crafted web content may lead to memory corruption due to improper memory\n  handling (bsc#1254170).\n- CVE-2025-43432: processing maliciously crafted web content may lead to an unexpected process crash due to a\n  use-after-free issue (bsc#1254171).\n- CVE-2025-43434: processing maliciously crafted web content may lead to an unexpected process crash due to a\n  use-after-free issue (bsc#1254179).\n- CVE-2025-43440: processing maliciously crafted web content may lead to an unexpected process crash due to missing\n  checks (bsc#1254177). \n- CVE-2025-43443: processing maliciously crafted web content may lead to an unexpected process crash due to missing\n  checks (bsc#1254176).\n- CVE-2025-43458: processing maliciously crafted web content may lead to an unexpected process crash due to issues with\n  state management (bsc#1254498).\n- CVE-2025-66287: processing maliciously crafted web content may lead to an unexpected process crash due to improper\n  memory handling (bsc#1254509).\n\nOther issues fixed and changes:\n\n- Version 2.50.3:  \n  * Fix seeking and looping of media elements that set the 'loop' property.\n  * Fix several crashes and rendering issues.\n- Version 2.50.2:\n  * Prevent unsafe URI schemes from participating in media playback.\n  * Make jsc_value_array_buffer_get_data() function introspectable.\n  * Fix logging in to Google accounts that have a WebAuthn second factor configured.\n  * Fix loading webkit://gpu when there are no threads configured for GPU rendering.\n  * Fix rendering gradiants that use the CSS hue interpolation method.\n  * Fix pasting image data from the clipboard.\n  * Fix font-family selection when the font name contains spaces.\n  * Fix the build with standard C libraries that lack execinfo.h, like Musl or uClibc.\n  * Fix capturing canvas snapshots in the Web Inspector.\n  * Fix several crashes and rendering issues.\n","status":"published","published":"2025-12-16T15:57:50Z","modified":"2026-03-23T04:51:31.801019Z","updated_at":"2026-11-02T15:54:00.344164Z"},{"id":"SUSE-SU-2025:4423-1","title":"Security update for webkit2gtk3","description":"This update for webkit2gtk3 fixes the following issues:\n\nUpdate to version 2.50.3.\n\nSecurity issues fixed:\n\n- CVE-2025-13502: processing of maliciously crafted payloads by the GLib remote inspector server may lead to a\n  UIProcess crash due to an out-of-bounds read and an integer underflow (bsc#1254208).\n- CVE-2025-13947: use of the file drag-and-drop mechanism may lead to remote information disclosure due to a lack of\n  verification of the origins of drag operations (bsc#1254473).\n- CVE-2025-43392: websites may exfiltrate image data cross-origin due to issues with cache handling (bsc#1254165).\n- CVE-2025-43421: processing maliciously crafted web content may lead to an unexpected process crash due to enabled\n  array allocation sinking (bsc#1254167).\n- CVE-2025-43425: processing maliciously crafted web content may lead to an unexpected process crash due to improper\n  memory handling (bsc#1254168).\n- CVE-2025-43427: processing maliciously crafted web content may lead to an unexpected process crash due to issues with\n  state management (bsc#1254169).\n- CVE-2025-43429: processing maliciously crafted web content may lead to an unexpected process crash due to a buffer\n  overflow issue (bsc#1254174).\n- CVE-2025-43430: processing maliciously crafted web content may lead to an unexpected process crash due to issues with\n  state management (bsc#1254172).\n- CVE-2025-43431: processing maliciously crafted web content may lead to memory corruption due to improper memory\n  handling (bsc#1254170).\n- CVE-2025-43432: processing maliciously crafted web content may lead to an unexpected process crash due to a\n  use-after-free issue (bsc#1254171).\n- CVE-2025-43434: processing maliciously crafted web content may lead to an unexpected process crash due to a\n  use-after-free issue (bsc#1254179).\n- CVE-2025-43440: processing maliciously crafted web content may lead to an unexpected process crash due to missing\n  checks (bsc#1254177). \n- CVE-2025-43443: processing maliciously crafted web content may lead to an unexpected process crash due to missing\n  checks (bsc#1254176).\n- CVE-2025-43458: processing maliciously crafted web content may lead to an unexpected process crash due to issues with\n  state management (bsc#1254498).\n- CVE-2025-66287: processing maliciously crafted web content may lead to an unexpected process crash due to improper\n  memory handling (bsc#1254509).\n\nOther issues fixed and changes:\n\n- Version 2.50.3:\n  * Fix seeking and looping of media elements that set the 'loop' property.\n  * Fix several crashes and rendering issues.\n\n- Version 2.50.2:\n  * Prevent unsafe URI schemes from participating in media playback.\n  * Make jsc_value_array_buffer_get_data() function introspectable.\n  * Fix logging in to Google accounts that have a WebAuthn second factor configured.\n  * Fix loading webkit://gpu when there are no threads configured for GPU rendering.\n  * Fix rendering gradiants that use the CSS hue interpolation method.\n  * Fix pasting image data from the clipboard.\n  * Fix font-family selection when the font name contains spaces.\n  * Fix the build with standard C libraries that lack execinfo.h, like Musl or uClibc.\n  * Fix capturing canvas snapshots in the Web Inspector.\n  * Fix several crashes and rendering issues.\n","status":"published","published":"2025-12-17T11:01:39Z","modified":"2026-03-23T04:51:40.566374Z","updated_at":"2026-11-02T15:54:00.344164Z"},{"id":"SUSE-SU-2026:0021-1","title":"Security update for webkit2gtk3","description":"This update for webkit2gtk3 fixes the following issues:\n\nUpdate to version 2.50.4.\n\nSecurity issues fixed:\n\n- CVE-2025-13502: processing of maliciously crafted payloads by the GLib remote inspector server may lead to a\n  UIProcess crash due to an out-of-bounds read and an integer underflow (bsc#1254208).\n- CVE-2025-13947: use of the file drag-and-drop mechanism may lead to remote information disclosure due to a lack of\n  verification of the origins of drag operations (bsc#1254473).\n- CVE-2025-14174: processing maliciously crafted web content may lead to memory corruption due to improper validation\n  (bsc#1255497).\n- CVE-2025-43392: websites may exfiltrate image data cross-origin due to issues with cache handling (bsc#1254165).\n- CVE-2025-43421: processing maliciously crafted web content may lead to an unexpected process crash due to enabled\n  array allocation sinking (bsc#1254167).\n- CVE-2025-43425: processing maliciously crafted web content may lead to an unexpected process crash due to improper\n  memory handling (bsc#1254168).\n- CVE-2025-43427: processing maliciously crafted web content may lead to an unexpected process crash due to issues with\n  state management (bsc#1254169).\n- CVE-2025-43429: processing maliciously crafted web content may lead to an unexpected process crash due to a buffer\n  overflow issue (bsc#1254174).\n- CVE-2025-43430: processing maliciously crafted web content may lead to an unexpected process crash due to issues with\n  state management (bsc#1254172).\n- CVE-2025-43431: processing maliciously crafted web content may lead to memory corruption due to improper memory\n  handling (bsc#1254170).\n- CVE-2025-43432: processing maliciously crafted web content may lead to an unexpected process crash due to a\n  use-after-free issue (bsc#1254171).\n- CVE-2025-43434: processing maliciously crafted web content may lead to an unexpected process crash due to a\n  use-after-free issue (bsc#1254179).\n- CVE-2025-43440: processing maliciously crafted web content may lead to an unexpected process crash due to missing\n  checks (bsc#1254177). \n- CVE-2025-43443: processing maliciously crafted web content may lead to an unexpected process crash due to missing\n  checks (bsc#1254176).\n- CVE-2025-43458: processing maliciously crafted web content may lead to an unexpected process crash due to issues with\n  state management (bsc#1254498).\n- CVE-2025-43501: processing maliciously crafted web content may lead to an unexpected process crash due to a buffer\n  overflow issue (bsc#1255194).\n- CVE-2025-43529: processing maliciously crafted web content may lead to arbitrary code execution due to a\n  use-after-free issue (bsc#1255198).\n- CVE-2025-43531: processing maliciously crafted web content may lead to an unexpected process crash due to a race\n  condition (bsc#1255183).\n- CVE-2025-43535: processing maliciously crafted web content may lead to an unexpected process crash due to improper\n  memory handling (bsc#1255195).\n- CVE-2025-43536: processing maliciously crafted web content may lead to an unexpected process crash due to a\n  use-after-free issue (bsc#1255200).\n- CVE-2025-43541: processing maliciously crafted web content may lead to an unexpected process crash due to type\n  confusion (bsc#1255191).\n- CVE-2025-66287: processing maliciously crafted web content may lead to an unexpected process crash due to improper\n  memory handling (bsc#1254509).\n\nOther issues fixed and changes:\n\n- Version 2.50.4:\n  * Correctly handle the program name passed to the sleep disabler.\n  * Ensure GStreamer is initialized before using the Quirks.\n  * Fix several crashes and rendering issues.\n    \n- Version 2.50.3:  \n  * Fix seeking and looping of media elements that set the 'loop' property.\n  * Fix several crashes and rendering issues.\n    \n- Version 2.50.2:\n  * Prevent unsafe URI schemes from participating in media playback.\n  * Make jsc_value_array_buffer_get_data() function introspectable.\n  * Fix logging in to Google accounts that have a WebAuthn second factor configured.\n  * Fix loading webkit://gpu when there are no threads configured for GPU rendering.\n  * Fix rendering gradiants that use the CSS hue interpolation method.\n  * Fix pasting image data from the clipboard.\n  * Fix font-family selection when the font name contains spaces.\n  * Fix the build with standard C libraries that lack execinfo.h, like Musl or uClibc.\n  * Fix capturing canvas snapshots in the Web Inspector.\n  * Fix several crashes and rendering issues.\n    \n- Fix a11y regression where AT-SPI roles were mapped incorrectly.\n\n","status":"published","published":"2026-01-05T11:12:33Z","modified":"2026-03-23T04:51:52.246402Z","updated_at":"2026-11-02T15:54:00.846737Z"},{"id":"SUSE-SU-2026:20102-1","title":"Security update for webkit2gtk3","description":"This update for webkit2gtk3 fixes the following issues:\n\nUpdate to version 2.50.4.\n\nSecurity issues fixed:\n\n- CVE-2025-13502: processing of maliciously crafted payloads by the GLib remote inspector server may lead to a\n  UIProcess crash due to an out-of-bounds read and an integer underflow (bsc#1254208).\n- CVE-2025-13947: use of the file drag-and-drop mechanism may lead to remote information disclosure due to a lack of\n  verification of the origins of drag operations (bsc#1254473).\n- CVE-2025-14174: processing maliciously crafted web content may lead to memory corruption due to improper validation\n  (bsc#1255497).\n- CVE-2025-43272: processing maliciously crafted web content may lead to an unexpected process crash due to improper\n  memory handling (bsc#1250439).\n- CVE-2025-43342: processing maliciously crafted web content may lead to an unexpected process crash due to a\n  correctness issue and missing checks (bsc#1250440).\n- CVE-2025-43343: processing maliciously crafted web content may lead to an unexpected process crash due to improper\n  memory handling (bsc#1251975).\n- CVE-2025-43356: a website may be able to access sensor information without user consent due to improper cache handling\n  (bsc#1250441).\n- CVE-2025-43368: processing maliciously crafted web content may lead to an unexpected process crash due to a\n  use-after-free issue (bsc#1250442).\n- CVE-2025-43392: websites may exfiltrate image data cross-origin due to issues with cache handling (bsc#1254165).\n- CVE-2025-43419: processing maliciously crafted web content may lead to memory corruption due to improper memory\n  handling (bsc#1254166).\n- CVE-2025-43421: processing maliciously crafted web content may lead to an unexpected process crash due to enabled\n  array allocation sinking (bsc#1254167).\n- CVE-2025-43425: processing maliciously crafted web content may lead to an unexpected process crash due to improper\n  memory handling (bsc#1254168).\n- CVE-2025-43427: processing maliciously crafted web content may lead to an unexpected process crash due to issues with\n  state management (bsc#1254169).\n- CVE-2025-43429: processing maliciously crafted web content may lead to an unexpected process crash due to a buffer\n  overflow issue (bsc#1254174).\n- CVE-2025-43430: processing maliciously crafted web content may lead to an unexpected process crash due to issues with\n  state management (bsc#1254172).\n- CVE-2025-43431: processing maliciously crafted web content may lead to memory corruption due to improper memory\n  handling (bsc#1254170).\n- CVE-2025-43432: processing maliciously crafted web content may lead to an unexpected process crash due to a\n  use-after-free issue (bsc#1254171).\n- CVE-2025-43434: processing maliciously crafted web content may lead to an unexpected process crash due to a\n  use-after-free issue (bsc#1254179).\n- CVE-2025-43440: processing maliciously crafted web content may lead to an unexpected process crash due to missing\n  checks (bsc#1254177).\n- CVE-2025-43443: processing maliciously crafted web content may lead to an unexpected process crash due to missing\n  checks (bsc#1254176).\n- CVE-2025-43458: processing maliciously crafted web content may lead to an unexpected process crash due to issues with\n  state management (bsc#1254498).\n- CVE-2025-43501: processing maliciously crafted web content may lead to an unexpected process crash due to a buffer\n  overflow issue (bsc#1255194).\n- CVE-2025-43529: processing maliciously crafted web content may lead to arbitrary code execution due to a\n  use-after-free issue (bsc#1255198).\n- CVE-2025-43531: processing maliciously crafted web content may lead to an unexpected process crash due to a race\n  condition (bsc#1255183).\n- CVE-2025-43535: processing maliciously crafted web content may lead to an unexpected process crash due to improper\n  memory handling (bsc#1255195).\n- CVE-2025-43536: processing maliciously crafted web content may lead to an unexpected process crash due to a\n  use-after-free issue (bsc#1255200).\n- CVE-2025-43541: processing maliciously crafted web content may lead to an unexpected process crash due to type\n  confusion (bsc#1255191).\n- CVE-2025-66287: processing maliciously crafted web content may lead to an unexpected process crash due to improper\n  memory handling (bsc#1254509).\n\nOther issues fixed and changes:\n\n- Version 2.50.4:\n  * Correctly handle the program name passed to the sleep disabler.\n  * Ensure GStreamer is initialized before using the Quirks.\n  * Fix several crashes and rendering issues.\n\n- Version 2.50.3:\n  * Fix seeking and looping of media elements that set the \"loop\" property.\n  * Fix several crashes and rendering issues.\n\n- Version 2.50.2:\n  * Prevent unsafe URI schemes from participating in media playback.\n  * Make jsc_value_array_buffer_get_data() function introspectable.\n  * Fix logging in to Google accounts that have a WebAuthn second factor configured.\n  * Fix loading webkit://gpu when there are no threads configured for GPU rendering.\n  * Fix rendering gradiants that use the CSS hue interpolation method.\n  * Fix pasting image data from the clipboard.\n  * Fix font-family selection when the font name contains spaces.\n  * Fix the build with standard C libraries that lack execinfo.h, like Musl or uClibc.\n  * Fix capturing canvas snapshots in the Web Inspector.\n  * Fix several crashes and rendering issues.\n\n- Version 2.50.1:\n  * Improve text rendering performance.\n  * Fix audio playback broken on instagram.\n  * Fix rendering of layers with fractional transforms.\n  * Fix the build with ENABLE(VIDEO) disabled.\n  * Fix the build in s390x.\n  * Fix several crashes and rendering issues.\n\n- Version 2.50.0:\n  * Improved rendering performance by recording each layer once and replaying every dirty region in different worker\n    threads.\n  * Enable damage propagation to the UI process by default.\n  * CSS property font-variant-emoji is now enabled by default.\n  * Font synthesis properties (bold/italic) are now properly handled.\n  * Ensure web view is focused on tap gesture.\n  * Added new API to get the theme color of a WebKitWebView.\n\n- Version 2.49.90:\n  * Add support for font collection / fragment identifiers.\n  * Fix web process deadlock on exit.\n  * Fix stuttering when playing WebP animations\n  * Fix CSS animations with cubic-bezier timing function.\n  * Do not start the MemoryPressureMonitor if it’s disabled\n  * Fix several crashes and rendering issues.\n  * Updated translations.\n\n- Version 2.48.6:\n  * Fix emojis incorrectly rendered in their text variant.\n  * Add support for font collection / fragment identifiers.\n  * Fix web process deadlock on exit.\n  * Fix stuttering when playing WebP animations.\n  * Fix CSS animations with cubic-bezier timing function.\n  * Do not start the MemoryPressureMonitor if it's disabled.\n  * Fix several crashes and rendering issues.\n\n- Fix a11y regression where AT-SPI roles were mapped incorrectly.\n- Disable skia on ppc64le.\n\n","status":"published","published":"2026-01-20T12:37:33Z","modified":"2026-03-23T04:52:35.726898Z","updated_at":"2026-11-02T15:54:01.610851Z"},{"id":"USN-7914-1","title":"webkit2gtk vulnerabilities","description":"Several security issues were discovered in the WebKitGTK Web and JavaScript\nengines. If a user were tricked into viewing a malicious website, a remote\nattacker could exploit a variety of issues related to web browser security,\nincluding cross-site scripting attacks, denial of service attacks, and\narbitrary code execution.","status":"published","published":"2025-12-08T13:17:04Z","modified":"2026-04-22T11:04:37.080002Z","updated_at":"2026-11-02T16:58:21.91885Z"}]}}