This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page. View CVE-2021-45088 →

DEBIAN-CVE-2021-45088

XSS can occur in GNOME Web (aka Epiphany) before 40.4 and 41.x before 41.1 via an error page.

Original description

The description as published by the source.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Debian:12 epiphany-browser

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"41.2-1"}]}]

Debian:13 epiphany-browser

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"41.2-1"}]}]

Debian:14 epiphany-browser

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"41.2-1"}]}]