{"id":"CVE-2026-77679","aliases":["openSUSE-SU-2026:12361-1","openSUSE-SU-2026:22199-1"],"status":"published","title":"epiphany-51.1-1.1 on GA media","description":"These are all security issues fixed in the epiphany-51.1-1.1 package on the GA media of openSUSE Tumbleweed.","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2026-10-28T15:37:12Z","modified":"2026-11-01T17:23:30Z","affected":[{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"epiphany","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"51.1-1.1"}]}],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"epiphany","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"48.5-bp160.2.1"}]}],"bundled":2}],"references":[{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2026-18487","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-77679","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-77682","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-94291","tags":["web"]},{"url":"https://bugzilla.suse.com/1275932","tags":["report"]},{"url":"https://bugzilla.suse.com/1276758","tags":["report"]}],"sources":{"osv":[{"id":"openSUSE-SU-2026:12361-1","title":"epiphany-51.1-1.1 on GA media","description":"These are all security issues fixed in the epiphany-51.1-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-10-30T00:00:00Z","modified":"2026-10-31T18:00:05.939295492Z","updated_at":"2026-11-02T16:58:41.463445Z"},{"id":"openSUSE-SU-2026:22199-1","title":"Security update for epiphany","description":"This update for epiphany fixes the following issues:\n\nChanges in epiphany:\n\n- CVE-2026-77679: path traversal in WebExtension XPI extraction\n    (ZIP slip) (bsc#1276758)\n- CVE-2026-77682: JavaScript code injection in autofill via\n  unsanitized CSS selector from element id (bsc#1275932)\n","status":"published","published":"2026-10-28T15:37:12Z","modified":"2026-11-01T17:23:30.219127025Z","updated_at":"2026-11-02T16:58:42.426393Z"}]}}