{"id":"SUSE-SU-2026:4676-1","summary":"Security update for webkit2gtk3","details":"This update for webkit2gtk3 fixes the following issues:\n\nWebKitGTK and WPE WebKit Security Advisory WSA-2026-0006 (bsc#1284619):\n\n- CVE-2024-1283: Heap buffer overflow in Skia in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.\n- CVE-2024-43091: Out of bounds write due to an integer overflow in filterMask of SkEmbossMaskFilter.cpp could lead to remote code execution.\n- CVE-2024-43097: Out of bounds write due to an integer overflow in resizeToAtLeast of SkRegion.cpp could lead to local escalation of privilege.\n- CVE-2024-43767: Heap overflow due to improper input validation in prepare_to_draw_into_mask of SkBlurMaskFilterImpl.cpp could lead to remote code execution.\n- CVE-2024-43768: Out of bounds write due to an integer overflow in skia_alloc_func of SkDeflate.cpp could lead to local escalation of privilege.\n- CVE-2024-7966: Out of bounds memory access in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to perform out of bounds memory access via a crafted HTML page.\n- CVE-2024-8193: Heap buffer overflow in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.\n- CVE-2024-8198: Heap buffer overflow in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.\n- CVE-2024-8636: Heap buffer overflow in Skia in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.\n- CVE-2024-9123: Integer overflow in Skia in Google Chrome allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page.\n- CVE-2025-0436: Integer overflow in Skia in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.\n- CVE-2025-0444: Use after free in Skia in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.\n- CVE-2025-10502: Heap buffer overflow in ANGLE in Google Chrome allowed a remote attacker to potentially exploit heap corruption via malicious network traffic.\n- CVE-2025-26416: Out of bounds write due to a heap buffer overflow in initializeSwizzler of SkBmpStandardCodec.cpp could lead to remote escalation of privilege.\n- CVE-2025-32318: Out of bounds write due to a heap buffer overflow in Skia could lead to remote escalation of privilege.\n- CVE-2025-48622: Out of bounds read due to a buffer overflow in ProcessArea of dng_misc_opcodes.cpp could lead to local information disclosure.\n- CVE-2025-54627: An out-of-bounds write vulnerability in the skia module may affect service confidentiality upon successful exploitation.\n- CVE-2025-8901: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker to perform out of bounds memory access via a crafted HTML page.\n- CVE-2025-9478: Use after free in ANGLE in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.\n- CVE-2026-0908: Use after free in ANGLE in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.\n- CVE-2026-10009: Integer overflow in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to execute arbitrary code inside a sandbox via a crafted HTML page.\n- CVE-2026-10011: Inappropriate implementation in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page.\n- CVE-2026-10012: Use after free in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-10018: Integer overflow in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.\n- CVE-2026-10019: Integer overflow in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page.\n- CVE-2026-10881: Out of bounds read and write in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-10883: Type Confusion in ANGLE in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.\n- CVE-2026-10889: Out of bounds read in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-10907: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.\n- CVE-2026-10919: Use after free in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-10941: Out of bounds memory access in Skia in Google Chrome allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.\n- CVE-2026-10974: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-10977: Uninitialized Use in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page.\n- CVE-2026-10979: Out of bounds read in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.\n- CVE-2026-10985: Out of bounds read in Skia in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page.\n- CVE-2026-10993: Heap buffer overflow in Skia in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.\n- CVE-2026-10994: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.\n- CVE-2026-11004: Out of bounds read in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page.\n- CVE-2026-11024: Stack buffer overflow in Skia in Google Chrome allowed a remote attacker to potentially exploit stack corruption via a crafted HTML page.\n- CVE-2026-11039: Uninitialized Use in Skia in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page.\n- CVE-2026-11040: Use after free in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-11051: Out of bounds read in ANGLE in Google Chrome on Linux allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.\n- CVE-2026-11057: Uninitialized Use in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page.\n- CVE-2026-11061: Type Confusion in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-11065: Use after free in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-11066: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-11087: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page.\n- CVE-2026-11088: Integer overflow in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-11090: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page.\n- CVE-2026-11104: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page.\n- CVE-2026-11109: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page.\n- CVE-2026-11110: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page.\n- CVE-2026-11111: Out of bounds read in ANGLE in Google Chrome allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.\n- CVE-2026-11113: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-11121: Insufficient validation of untrusted input in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page.\n- CVE-2026-11123: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.\n- CVE-2026-11124: Integer overflow in Skia in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.\n- CVE-2026-11137: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.\n- CVE-2026-11138: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page.\n- CVE-2026-11159: Uninitialized Use in Skia in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page.\n- CVE-2026-11191: Out of bounds memory access in ANGLE in Google Chrome allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.\n- CVE-2026-11663: Use after free in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-11675: Out of bounds read in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page.\n- CVE-2026-13780: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-13781: Insufficient validation of untrusted input in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-13834: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-13841: Integer overflow in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-13859: Inappropriate implementation in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-13877: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page.\n- CVE-2026-13883: Type Confusion in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-13971: Uninitialized Use in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page.\n- CVE-2026-14044: Use after free in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-14125: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.\n- CVE-2026-14152: Out of bounds read and write in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-14382: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-14386: Out of bounds read in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.\n- CVE-2026-14387: Integer overflow in Skia in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-14388: Out of bounds read in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.\n- CVE-2026-14389: Integer overflow in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-14390: Use after free in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-14396: Out of bounds read in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page.\n- CVE-2026-14398: Use after free in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-14400: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-14410: Inappropriate implementation in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted HTML page.\n- CVE-2026-14411: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-14412: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-14413: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-14414: Insufficient validation of untrusted input in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page.\n- CVE-2026-14418: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page.\n- CVE-2026-14419: Use after free in Skia in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-14425: Use after free in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-14427: Heap buffer overflow in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-14429: Insufficient validation of untrusted input in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-15109: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.\n- CVE-2026-15766: Uninitialized Use in Skia in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.\n- CVE-2026-15774: Use after free in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-16413: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-16417: Uninitialized Use in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page.\n- CVE-2026-17653: Use after free in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-17655: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-17667: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page.\n- CVE-2026-17668: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page.\n- CVE-2026-17671: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-17675: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-17678: Out of bounds read in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-17682: Integer overflow in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-17683: Inappropriate implementation in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.\n- CVE-2026-17687: Type Confusion in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-17689: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page.\n- CVE-2026-17697: Type Confusion in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-17702: Inappropriate implementation in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page.\n- CVE-2026-17704: Use after free in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-17714: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.\n- CVE-2026-17717: Integer overflow in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-17718: Use after free in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-17721: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-17740: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page.\n- CVE-2026-17745: Out of bounds read in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-17750: Use after free in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-17757: Uninitialized Use in Skia in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page.\n- CVE-2026-17771: Uninitialized Use in Skia in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page.\n- CVE-2026-17785: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page.\n- CVE-2026-17801: Out of bounds read and write in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-17832: Use after free in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-17847: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-17914: Side-channel information leakage in Skia in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.\n- CVE-2026-19160: Uninitialized Use in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page.\n- CVE-2026-19161: Uninitialized Use in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page.\n- CVE-2026-19173: Out of bounds write in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-19176: Use after free in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to execute arbitrary code inside a sandbox via a crafted HTML page.\n- CVE-2026-3536: Integer overflow in ANGLE in Google Chrome allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.\n- CVE-2026-3538: Integer overflow in Skia in Google Chrome allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.\n- CVE-2026-3909: Out of bounds write in Skia in Google Chrome allowed a remote attacker to perform out of bounds memory access via a crafted HTML page.\n- CVE-2026-3931: Heap buffer overflow in Skia in Google Chrome allowed a remote attacker to perform out of bounds memory access via a crafted HTML page.\n- CVE-2026-43670: A Content Security Policy bypass in AudioWorklet contexts that allowed processing maliciously crafted web content was addressed with improved enforcement.\n- CVE-2026-4448: Heap buffer overflow in ANGLE in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.\n- CVE-2026-4460: Out of bounds read in Skia in Google Chrome allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.\n- CVE-2026-4464: Integer overflow in ANGLE in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.\n- CVE-2026-5283: Inappropriate implementation in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page.\n- CVE-2026-5870: Integer overflow in Skia in Google Chrome allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.\n- CVE-2026-6296: Heap buffer overflow in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-6298: Heap buffer overflow in Skia in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.\n- CVE-2026-6364: Out of bounds read in Skia in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted file.\n- CVE-2026-64715: A use-after-free issue that may lead to an unexpected process crash when processing maliciously crafted web content was addressed with improved memory management.\n- CVE-2026-64753: A permissions issue that may disclose sensitive user information when processing maliciously crafted web content was addressed by removing the vulnerable code.\n- CVE-2026-64778: A vulnerability that may leak sensitive data when visiting a maliciously crafted website was addressed with improved checks.\n- CVE-2026-64779: A memory corruption vulnerability that may lead to an unexpected crash when processing maliciously crafted web content was addressed with improved locking.\n- CVE-2026-64780: A vulnerability that may lead to an unexpected crash when processing maliciously crafted web content was addressed with improved checks.\n- CVE-2026-64781: A vulnerability that may lead to an unexpected crash when processing maliciously crafted web content was addressed with improved input validation.\n- CVE-2026-64782: A memory corruption vulnerability that may lead to an unexpected crash when processing maliciously crafted web content was addressed with improved locking.\n- CVE-2026-64784: An out-of-bounds access issue that may lead to an unexpected crash when processing maliciously crafted web content was addressed with improved bounds checking.\n- CVE-2026-65331: A vulnerability that may lead to an unexpected crash when processing maliciously crafted web content was addressed through improved state management.\n- CVE-2026-65332: A vulnerability that may lead to an unexpected crash when processing maliciously crafted web content was addressed through improved state management.\n- CVE-2026-65333: A vulnerability that may lead to an unexpected crash when processing maliciously crafted web content was addressed through improved state management.\n- CVE-2026-65334: A memory corruption issue that may lead to an unexpected crash when processing maliciously crafted web content was addressed with improved state management.\n- CVE-2026-65336: A vulnerability that may lead to an unexpected crash when processing maliciously crafted web content was addressed through improved state management.\n- CVE-2026-65337: A vulnerability that may lead to an unexpected crash when processing maliciously crafted web content was addressed through improved state management.\n- CVE-2026-65338: A vulnerability that may lead to an unexpected crash when processing maliciously crafted web content was addressed with improved memory handling.\n- CVE-2026-65340: A vulnerability that may lead to an unexpected crash when processing maliciously crafted web content was addressed through improved state management.\n- CVE-2026-65341: A vulnerability that may lead to memory corruption when processing maliciously crafted web content was addressed with improved memory handling.\n- CVE-2026-65351: A vulnerability that may lead to an unexpected crash when processing maliciously crafted web content was addressed through improved state management.\n- CVE-2026-7353: Heap buffer overflow in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-7354: Out of bounds read and write in Angle in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-7359: Use after free in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-76041: Information leak in Skia in Google Chrome allowed a remote attacker to potentially bypass web origin policy via a crafted HTML page.\n- CVE-2026-78904: Type confusion in ANGLE in Google Chrome allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page.\n- CVE-2026-78905: Type confusion in ANGLE in Google Chrome allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page.\n- CVE-2026-78906: Race condition in ANGLE in Google Chrome allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page.\n- CVE-2026-78914: Uninitialized resource in Skia in Google Chrome allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page.\n- CVE-2026-78958: Uninitialized resource in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially obtain cross-origin data via a crafted HTML page.\n- CVE-2026-78965: Uninitialized resource in ANGLE in Google Chrome allowed a remote attacker to obtain cross-origin data via a crafted HTML page.\n- CVE-2026-7900: Heap buffer overflow in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-79020: Out of bounds read in Skia in Google Chrome allowed a remote attacker to potentially read memory inside the sandbox via a crafted media file.\n- CVE-2026-79043: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page.\n- CVE-2026-79112: Out of bounds read in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to read memory inside the sandbox via a crafted HTML page.\n- CVE-2026-79118: Uninitialized resource in ANGLE in Google Chrome allowed a remote attacker to obtain cross-origin data via a crafted HTML page.\n- CVE-2026-79120: Uninitialized resource in ANGLE in Google Chrome allowed a remote attacker to potentially obtain cross-origin data via a crafted HTML page.\n- CVE-2026-79127: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page.\n- CVE-2026-79130: Buffer overflow in ANGLE in Google Chrome allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page.\n- CVE-2026-79131: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page.\n- CVE-2026-79144: Information leak in Skia in Google Chrome allowed a remote attacker to obtain cross-origin data via a crafted HTML page.\n- CVE-2026-79147: Information leak in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially obtain sensitive information via a crafted HTML page.\n- CVE-2026-79149: Use after free in ANGLE in Google Chrome allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page.\n- CVE-2026-79188: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page.\n- CVE-2026-79189: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page.\n- CVE-2026-7920: Use after free in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-79229: Uninitialized resource in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page.\n- CVE-2026-7923: Out of bounds write in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-79269: Uninitialized resource in ANGLE in Google Chrome allowed a remote attacker to potentially bypass web origin policy via a crafted HTML page.\n- CVE-2026-79270: Uninitialized resource in ANGLE in Google Chrome allowed a remote attacker to read memory outside the sandbox via a crafted HTML page.\n- CVE-2026-79275: Use after free in ANGLE in Google Chrome allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page.\n- CVE-2026-7942: Integer overflow in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page.\n- CVE-2026-7943: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to perform arbitrary read/write via a crafted HTML page.\n- CVE-2026-7949: Out of bounds read in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted Chrome Extension.\n- CVE-2026-84635: A logic issue that may lead to an unexpected process termination when processing maliciously crafted web content was addressed with improved state management.\n- CVE-2026-8579: Insufficient validation of untrusted input in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to perform an out of bounds memory write via a crafted print file.\n- CVE-2026-86898: A logic issue that may lead to universal cross-site scripting when opening a maliciously crafted webarchive file was addressed with improved state management.\n- CVE-2026-9877: Use after free in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-9878: Use after free in ANGLE in Google Chrome allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.\n- CVE-2026-9879: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker to execute arbitrary code via a crafted HTML page.\n- CVE-2026-9882: Integer overflow in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page.\n- CVE-2026-9893: Use after free in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-9899: Use after free in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-9900: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-9901: Use after free in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to execute arbitrary code via a crafted HTML page.\n- CVE-2026-9904: Use after free in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-9908: Out of bounds read in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.\n- CVE-2026-9909: Integer overflow in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to execute arbitrary code inside a sandbox via a crafted HTML page.\n- CVE-2026-9910: Out of bounds memory access in ANGLE in Google Chrome allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.\n- CVE-2026-9911: Integer overflow in ANGLE in Google Chrome allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.\n- CVE-2026-9913: Inappropriate implementation in ANGLE in Google Chrome allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.\n- CVE-2026-9914: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-9915: Heap buffer overflow in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-9916: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-9923: Use after free in Skia in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.\n- CVE-2026-9925: Use after free in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-9926: Heap buffer overflow in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-9927: Use after free in ANGLE in Google Chrome allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.\n- CVE-2026-9935: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page.\n- CVE-2026-9940: Heap buffer overflow in ANGLE in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.\n- CVE-2026-9941: Use after free in ANGLE in Google Chrome allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.\n- CVE-2026-9942: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page.\n- CVE-2026-9944: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page.\n- CVE-2026-9946: Use after free in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-9953: Out of bounds read in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.\n- CVE-2026-9965: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.\n- CVE-2026-9969: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker to execute arbitrary code via a crafted HTML page.\n- CVE-2026-9975: Out of bounds read and write in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-9981: Inappropriate implementation in Skia in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.\n- CVE-2026-9982: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n- CVE-2026-9983: Type Confusion in Skia in Google Chrome allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.\n- CVE-2026-9998: Integer overflow in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n  \nChanges for webkit2gtk3:\n\n- Update to version 2.54.1 \n","modified":"2026-10-15T10:30:36.282307012Z","published":"2026-10-14T14:47:47Z","related":["CVE-2024-1283","CVE-2024-43091","CVE-2024-43097","CVE-2024-43767","CVE-2024-43768","CVE-2024-7966","CVE-2024-8193","CVE-2024-8198","CVE-2024-8636","CVE-2024-9123","CVE-2025-0436","CVE-2025-0444","CVE-2025-10502","CVE-2025-26416","CVE-2025-32318","CVE-2025-48622","CVE-2025-54627","CVE-2025-6558","CVE-2025-8901","CVE-2025-9478","CVE-2026-0908","CVE-2026-10009","CVE-2026-10011","CVE-2026-10012","CVE-2026-10018","CVE-2026-10019","CVE-2026-10881","CVE-2026-10883","CVE-2026-10889","CVE-2026-10907","CVE-2026-10919","CVE-2026-10941","CVE-2026-10974","CVE-2026-10977","CVE-2026-10979","CVE-2026-10985","CVE-2026-10993","CVE-2026-10994","CVE-2026-11004","CVE-2026-11024","CVE-2026-11039","CVE-2026-11040","CVE-2026-11051","CVE-2026-11057","CVE-2026-11061","CVE-2026-11065","CVE-2026-11066","CVE-2026-11087","CVE-2026-11088","CVE-2026-11090","CVE-2026-11104","CVE-2026-11109","CVE-2026-11110","CVE-2026-11111","CVE-2026-11113","CVE-2026-11121","CVE-2026-11123","CVE-2026-11124","CVE-2026-11137","CVE-2026-11138","CVE-2026-11159","CVE-2026-11191","CVE-2026-11663","CVE-2026-11675","CVE-2026-13780","CVE-2026-13781","CVE-2026-13834","CVE-2026-13841","CVE-2026-13859","CVE-2026-13877","CVE-2026-13883","CVE-2026-13971","CVE-2026-14044","CVE-2026-14125","CVE-2026-14152","CVE-2026-14382","CVE-2026-14386","CVE-2026-14387","CVE-2026-14388","CVE-2026-14389","CVE-2026-14390","CVE-2026-14396","CVE-2026-14398","CVE-2026-14400","CVE-2026-14410","CVE-2026-14411","CVE-2026-14412","CVE-2026-14413","CVE-2026-14414","CVE-2026-14418","CVE-2026-14419","CVE-2026-14425","CVE-2026-14427","CVE-2026-14429","CVE-2026-15109","CVE-2026-15766","CVE-2026-15774","CVE-2026-16413","CVE-2026-16417","CVE-2026-17653","CVE-2026-17655","CVE-2026-17667","CVE-2026-17668","CVE-2026-17671","CVE-2026-17675","CVE-2026-17678","CVE-2026-17682","CVE-2026-17683","CVE-2026-17687","CVE-2026-17689","CVE-2026-17697","CVE-2026-17702","CVE-2026-17704","CVE-2026-17714","CVE-2026-17717","CVE-2026-17718","CVE-2026-17721","CVE-2026-17740","CVE-2026-17745","CVE-2026-17750","CVE-2026-17757","CVE-2026-17771","CVE-2026-17785","CVE-2026-17801","CVE-2026-17832","CVE-2026-17847","CVE-2026-17914","CVE-2026-19160","CVE-2026-19161","CVE-2026-19173","CVE-2026-19176","CVE-2026-3536","CVE-2026-3538","CVE-2026-3909","CVE-2026-3931","CVE-2026-43670","CVE-2026-4448","CVE-2026-4460","CVE-2026-4464","CVE-2026-5283","CVE-2026-5870","CVE-2026-6296","CVE-2026-6298","CVE-2026-6364","CVE-2026-64715","CVE-2026-64753","CVE-2026-64778","CVE-2026-64779","CVE-2026-64780","CVE-2026-64781","CVE-2026-64782","CVE-2026-64784","CVE-2026-65331","CVE-2026-65332","CVE-2026-65333","CVE-2026-65334","CVE-2026-65336","CVE-2026-65337","CVE-2026-65338","CVE-2026-65340","CVE-2026-65341","CVE-2026-65351","CVE-2026-7353","CVE-2026-7354","CVE-2026-7359","CVE-2026-76041","CVE-2026-78904","CVE-2026-78905","CVE-2026-78906","CVE-2026-78914","CVE-2026-78958","CVE-2026-78965","CVE-2026-7900","CVE-2026-79020","CVE-2026-79043","CVE-2026-79112","CVE-2026-79118","CVE-2026-79120","CVE-2026-79127","CVE-2026-79130","CVE-2026-79131","CVE-2026-79144","CVE-2026-79147","CVE-2026-79149","CVE-2026-79188","CVE-2026-79189","CVE-2026-7920","CVE-2026-79229","CVE-2026-7923","CVE-2026-79269","CVE-2026-79270","CVE-2026-79275","CVE-2026-7942","CVE-2026-7943","CVE-2026-7949","CVE-2026-84635","CVE-2026-8579","CVE-2026-86898","CVE-2026-9877","CVE-2026-9878","CVE-2026-9879","CVE-2026-9882","CVE-2026-9893","CVE-2026-9899","CVE-2026-9900","CVE-2026-9901","CVE-2026-9904","CVE-2026-9908","CVE-2026-9909","CVE-2026-9910","CVE-2026-9911","CVE-2026-9913","CVE-2026-9914","CVE-2026-9915","CVE-2026-9916","CVE-2026-9923","CVE-2026-9925","CVE-2026-9926","CVE-2026-9927","CVE-2026-9935","CVE-2026-9940","CVE-2026-9941","CVE-2026-9942","CVE-2026-9944","CVE-2026-9946","CVE-2026-9953","CVE-2026-9965","CVE-2026-9969","CVE-2026-9975","CVE-2026-9981","CVE-2026-9982","CVE-2026-9983","CVE-2026-9998"],"upstream":["CVE-2024-1283","CVE-2024-43091","CVE-2024-43097","CVE-2024-43767","CVE-2024-43768","CVE-2024-7966","CVE-2024-8193","CVE-2024-8198","CVE-2024-8636","CVE-2024-9123","CVE-2025-0436","CVE-2025-0444","CVE-2025-10502","CVE-2025-26416","CVE-2025-32318","CVE-2025-48622","CVE-2025-54627","CVE-2025-6558","CVE-2025-8901","CVE-2025-9478","CVE-2026-0908","CVE-2026-10009","CVE-2026-10011","CVE-2026-10012","CVE-2026-10018","CVE-2026-10019","CVE-2026-10881","CVE-2026-10883","CVE-2026-10889","CVE-2026-10907","CVE-2026-10919","CVE-2026-10941","CVE-2026-10974","CVE-2026-10977","CVE-2026-10979","CVE-2026-10985","CVE-2026-10993","CVE-2026-10994","CVE-2026-11004","CVE-2026-11024","CVE-2026-11039","CVE-2026-11040","CVE-2026-11051","CVE-2026-11057","CVE-2026-11061","CVE-2026-11065","CVE-2026-11066","CVE-2026-11087","CVE-2026-11088","CVE-2026-11090","CVE-2026-11104","CVE-2026-11109","CVE-2026-11110","CVE-2026-11111","CVE-2026-11113","CVE-2026-11121","CVE-2026-11123","CVE-2026-11124","CVE-2026-11137","CVE-2026-11138","CVE-2026-11159","CVE-2026-11191","CVE-2026-11663","CVE-2026-11675","CVE-2026-13780","CVE-2026-13781","CVE-2026-13834","CVE-2026-13841","CVE-2026-13859","CVE-2026-13877","CVE-2026-13883","CVE-2026-13971","CVE-2026-14044","CVE-2026-14125","CVE-2026-14152","CVE-2026-14382","CVE-2026-14386","CVE-2026-14387","CVE-2026-14388","CVE-2026-14389","CVE-2026-14390","CVE-2026-14396","CVE-2026-14398","CVE-2026-14400","CVE-2026-14410","CVE-2026-14411","CVE-2026-14412","CVE-2026-14413","CVE-2026-14414","CVE-2026-14418","CVE-2026-14419","CVE-2026-14425","CVE-2026-14427","CVE-2026-14429","CVE-2026-15109","CVE-2026-15766","CVE-2026-15774","CVE-2026-16413","CVE-2026-16417","CVE-2026-17653","CVE-2026-17655","CVE-2026-17667","CVE-2026-17668","CVE-2026-17671","CVE-2026-17675","CVE-2026-17678","CVE-2026-17682","CVE-2026-17683","CVE-2026-17687","CVE-2026-17689","CVE-2026-17697","CVE-2026-17702","CVE-2026-17704","CVE-2026-17714","CVE-2026-17717","CVE-2026-17718","CVE-2026-17721","CVE-2026-17740","CVE-2026-17745","CVE-2026-17750","CVE-2026-17757","CVE-2026-17771","CVE-2026-17785","CVE-2026-17801","CVE-2026-17832","CVE-2026-17847","CVE-2026-17914","CVE-2026-19160","CVE-2026-19161","CVE-2026-19173","CVE-2026-19176","CVE-2026-3536","CVE-2026-3538","CVE-2026-3909","CVE-2026-3931","CVE-2026-43670","CVE-2026-4448","CVE-2026-4460","CVE-2026-4464","CVE-2026-5283","CVE-2026-5870","CVE-2026-6296","CVE-2026-6298","CVE-2026-6364","CVE-2026-64715","CVE-2026-64753","CVE-2026-64778","CVE-2026-64779","CVE-2026-64780","CVE-2026-64781","CVE-2026-64782","CVE-2026-64784","CVE-2026-65331","CVE-2026-65332","CVE-2026-65333","CVE-2026-65334","CVE-2026-65336","CVE-2026-65337","CVE-2026-65338","CVE-2026-65340","CVE-2026-65341","CVE-2026-65351","CVE-2026-7353","CVE-2026-7354","CVE-2026-7359","CVE-2026-76041","CVE-2026-78904","CVE-2026-78905","CVE-2026-78906","CVE-2026-78914","CVE-2026-78958","CVE-2026-78965","CVE-2026-7900","CVE-2026-79020","CVE-2026-79043","CVE-2026-79112","CVE-2026-79118","CVE-2026-79120","CVE-2026-79127","CVE-2026-79130","CVE-2026-79131","CVE-2026-79144","CVE-2026-79147","CVE-2026-79149","CVE-2026-79188","CVE-2026-79189","CVE-2026-7920","CVE-2026-79229","CVE-2026-7923","CVE-2026-79269","CVE-2026-79270","CVE-2026-79275","CVE-2026-7942","CVE-2026-7943","CVE-2026-7949","CVE-2026-84635","CVE-2026-8579","CVE-2026-86898","CVE-2026-9877","CVE-2026-9878","CVE-2026-9879","CVE-2026-9882","CVE-2026-9893","CVE-2026-9899","CVE-2026-9900","CVE-2026-9901","CVE-2026-9904","CVE-2026-9908","CVE-2026-9909","CVE-2026-9910","CVE-2026-9911","CVE-2026-9913","CVE-2026-9914","CVE-2026-9915","CVE-2026-9916","CVE-2026-9923","CVE-2026-9925","CVE-2026-9926","CVE-2026-9927","CVE-2026-9935","CVE-2026-9940","CVE-2026-9941","CVE-2026-9942","CVE-2026-9944","CVE-2026-9946","CVE-2026-9953","CVE-2026-9965","CVE-2026-9969","CVE-2026-9975","CVE-2026-9981","CVE-2026-9982","CVE-2026-9983","CVE-2026-9998"],"references":[{"type":"ADVISORY","url":"https://www.suse.com/support/update/announcement/2026/suse-su-20264676-1/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1277005"},{"type":"REPORT","url":"https://bugzilla.suse.com/1277006"},{"type":"REPORT","url":"https://bugzilla.suse.com/1277007"},{"type":"REPORT","url":"https://bugzilla.suse.com/1277009"},{"type":"REPORT","url":"https://bugzilla.suse.com/1277010"},{"type":"REPORT","url":"https://bugzilla.suse.com/1277011"},{"type":"REPORT","url":"https://bugzilla.suse.com/1277012"},{"type":"REPORT","url":"https://bugzilla.suse.com/1277013"},{"type":"REPORT","url":"https://bugzilla.suse.com/1277014"},{"type":"REPORT","url":"https://bugzilla.suse.com/1277016"},{"type":"REPORT","url":"https://bugzilla.suse.com/1277017"},{"type":"REPORT","url":"https://bugzilla.suse.com/1277018"},{"type":"REPORT","url":"https://bugzilla.suse.com/1281116"},{"type":"REPORT","url":"https://bugzilla.suse.com/1284619"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2024-1283"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2024-43091"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2024-43097"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2024-43767"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2024-43768"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2024-7966"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2024-8193"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2024-8198"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2024-8636"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2024-9123"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2025-0436"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2025-0444"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2025-10502"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2025-26416"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2025-32318"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2025-48622"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2025-54627"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2025-6558"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2025-8901"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2025-9478"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-0908"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-10009"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-10011"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-10012"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-10018"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-10019"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-10881"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-10883"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-10889"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-10907"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-10919"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-10941"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-10974"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-10977"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-10979"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-10985"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-10993"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-10994"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-11004"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-11024"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-11039"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-11040"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-11051"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-11057"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-11061"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-11065"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-11066"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-11087"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-11088"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-11090"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-11104"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-11109"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-11110"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-11111"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-11113"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-11121"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-11123"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-11124"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-11137"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-11138"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-11159"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-11191"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-11663"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-11675"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-13780"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-13781"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-13834"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-13841"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-13859"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-13877"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-13883"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-13971"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-14044"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-14125"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-14152"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-14382"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-14386"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-14387"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-14388"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-14389"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-14390"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-14396"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-14398"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-14400"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-14410"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-14411"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-14412"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-14413"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-14414"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-14418"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-14419"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-14425"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-14427"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-14429"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-15109"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-15766"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-15774"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-16413"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-16417"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-17653"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-17655"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-17667"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-17668"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-17671"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-17675"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-17678"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-17682"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-17683"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-17687"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-17689"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-17697"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-17702"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-17704"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-17714"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-17717"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-17718"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-17721"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-17740"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-17745"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-17750"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-17757"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-17771"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-17785"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-17801"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-17832"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-17847"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-17914"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-19160"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-19161"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-19173"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-19176"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-3536"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-3538"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-3909"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-3931"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-43670"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-4448"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-4460"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-4464"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-5283"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-5870"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-6296"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-6298"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-6364"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-64715"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-64753"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-64778"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-64779"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-64780"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-64781"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-64782"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-64784"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-65331"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-65332"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-65333"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-65334"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-65336"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-65337"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-65338"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-65340"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-65341"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-65351"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-7353"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-7354"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-7359"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-76041"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-78904"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-78905"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-78906"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-78914"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-78958"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-78965"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-7900"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-79020"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-79043"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-79112"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-79118"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-79120"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-79127"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-79130"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-79131"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-79144"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-79147"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-79149"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-79188"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-79189"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-7920"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-79229"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-7923"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-79269"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-79270"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-79275"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-7942"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-7943"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-7949"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-84635"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-8579"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-86898"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-9877"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-9878"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-9879"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-9882"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-9893"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-9899"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-9900"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-9901"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-9904"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-9908"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-9909"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-9910"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-9911"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-9913"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-9914"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-9915"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-9916"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-9923"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-9925"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-9926"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-9927"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-9935"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-9940"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-9941"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-9942"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-9944"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-9946"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-9953"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-9965"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-9969"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-9975"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-9981"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-9982"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-9983"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-9998"}],"affected":[{"package":{"name":"webkit2gtk3","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","purl":"pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-ESPOS"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.54.1-150400.4.152.2"}]}],"ecosystem_specific":{"binaries":[{"WebKitGTK-6.0-lang":"2.54.1-150400.4.152.2","typelib-1_0-WebKit2WebExtension-4_1":"2.54.1-150400.4.152.2","typelib-1_0-WebKit2-4_0":"2.54.1-150400.4.152.2","webkit2gtk3-soup2-devel":"2.54.1-150400.4.152.2","libwebkitgtk-6_0-4":"2.54.1-150400.4.152.2","libwebkit2gtk-4_0-37":"2.54.1-150400.4.152.2","typelib-1_0-JavaScriptCore-4_1":"2.54.1-150400.4.152.2","webkitgtk-6_0-injected-bundles":"2.54.1-150400.4.152.2","WebKitGTK-4.0-lang":"2.54.1-150400.4.152.2","libjavascriptcoregtk-6_0-1":"2.54.1-150400.4.152.2","libjavascriptcoregtk-4_1-0":"2.54.1-150400.4.152.2","webkit2gtk-4_0-injected-bundles":"2.54.1-150400.4.152.2","typelib-1_0-WebKit2WebExtension-4_0":"2.54.1-150400.4.152.2","libjavascriptcoregtk-4_0-18":"2.54.1-150400.4.152.2","typelib-1_0-JavaScriptCore-4_0":"2.54.1-150400.4.152.2","webkit2gtk3-devel":"2.54.1-150400.4.152.2","WebKitGTK-4.1-lang":"2.54.1-150400.4.152.2","libwebkit2gtk-4_1-0":"2.54.1-150400.4.152.2","typelib-1_0-WebKit2-4_1":"2.54.1-150400.4.152.2","webkit2gtk-4_1-injected-bundles":"2.54.1-150400.4.152.2"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4676-1.json"}},{"package":{"name":"webkit2gtk3-soup2","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","purl":"pkg:rpm/suse/webkit2gtk3-soup2&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-ESPOS"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.54.1-150400.4.152.2"}]}],"ecosystem_specific":{"binaries":[{"typelib-1_0-WebKit2-4_1":"2.54.1-150400.4.152.2","webkit2gtk3-devel":"2.54.1-150400.4.152.2","typelib-1_0-WebKit2-4_0":"2.54.1-150400.4.152.2","libwebkit2gtk-4_0-37":"2.54.1-150400.4.152.2","libjavascriptcoregtk-4_1-0":"2.54.1-150400.4.152.2","typelib-1_0-JavaScriptCore-4_1":"2.54.1-150400.4.152.2","webkit2gtk3-soup2-devel":"2.54.1-150400.4.152.2","webkit2gtk-4_1-injected-bundles":"2.54.1-150400.4.152.2","typelib-1_0-WebKit2WebExtension-4_0":"2.54.1-150400.4.152.2","typelib-1_0-JavaScriptCore-4_0":"2.54.1-150400.4.152.2","libjavascriptcoregtk-6_0-1":"2.54.1-150400.4.152.2","libwebkitgtk-6_0-4":"2.54.1-150400.4.152.2","WebKitGTK-4.0-lang":"2.54.1-150400.4.152.2","WebKitGTK-6.0-lang":"2.54.1-150400.4.152.2","libwebkit2gtk-4_1-0":"2.54.1-150400.4.152.2","webkit2gtk-4_0-injected-bundles":"2.54.1-150400.4.152.2","WebKitGTK-4.1-lang":"2.54.1-150400.4.152.2","webkitgtk-6_0-injected-bundles":"2.54.1-150400.4.152.2","typelib-1_0-WebKit2WebExtension-4_1":"2.54.1-150400.4.152.2","libjavascriptcoregtk-4_0-18":"2.54.1-150400.4.152.2"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4676-1.json"}},{"package":{"name":"webkit2gtk4","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","purl":"pkg:rpm/suse/webkit2gtk4&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-ESPOS"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.54.1-150400.4.152.2"}]}],"ecosystem_specific":{"binaries":[{"typelib-1_0-JavaScriptCore-4_0":"2.54.1-150400.4.152.2","webkit2gtk-4_1-injected-bundles":"2.54.1-150400.4.152.2","WebKitGTK-4.0-lang":"2.54.1-150400.4.152.2","libjavascriptcoregtk-4_0-18":"2.54.1-150400.4.152.2","libjavascriptcoregtk-4_1-0":"2.54.1-150400.4.152.2","webkitgtk-6_0-injected-bundles":"2.54.1-150400.4.152.2","typelib-1_0-WebKit2WebExtension-4_0":"2.54.1-150400.4.152.2","libwebkit2gtk-4_1-0":"2.54.1-150400.4.152.2","webkit2gtk3-soup2-devel":"2.54.1-150400.4.152.2","typelib-1_0-WebKit2-4_1":"2.54.1-150400.4.152.2","typelib-1_0-WebKit2-4_0":"2.54.1-150400.4.152.2","libwebkit2gtk-4_0-37":"2.54.1-150400.4.152.2","webkit2gtk3-devel":"2.54.1-150400.4.152.2","libjavascriptcoregtk-6_0-1":"2.54.1-150400.4.152.2","typelib-1_0-WebKit2WebExtension-4_1":"2.54.1-150400.4.152.2","WebKitGTK-4.1-lang":"2.54.1-150400.4.152.2","libwebkitgtk-6_0-4":"2.54.1-150400.4.152.2","WebKitGTK-6.0-lang":"2.54.1-150400.4.152.2","webkit2gtk-4_0-injected-bundles":"2.54.1-150400.4.152.2","typelib-1_0-JavaScriptCore-4_1":"2.54.1-150400.4.152.2"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4676-1.json"}},{"package":{"name":"webkit2gtk3","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","purl":"pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-LTSS"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.54.1-150400.4.152.2"}]}],"ecosystem_specific":{"binaries":[{"typelib-1_0-JavaScriptCore-4_0":"2.54.1-150400.4.152.2","WebKitGTK-4.1-lang":"2.54.1-150400.4.152.2","webkitgtk-6_0-injected-bundles":"2.54.1-150400.4.152.2","WebKitGTK-4.0-lang":"2.54.1-150400.4.152.2","libwebkitgtk-6_0-4":"2.54.1-150400.4.152.2","libjavascriptcoregtk-6_0-1":"2.54.1-150400.4.152.2","webkit2gtk3-devel":"2.54.1-150400.4.152.2","typelib-1_0-JavaScriptCore-4_1":"2.54.1-150400.4.152.2","WebKitGTK-6.0-lang":"2.54.1-150400.4.152.2","webkit2gtk3-soup2-devel":"2.54.1-150400.4.152.2","typelib-1_0-WebKit2WebExtension-4_0":"2.54.1-150400.4.152.2","webkit2gtk-4_1-injected-bundles":"2.54.1-150400.4.152.2","webkit2gtk-4_0-injected-bundles":"2.54.1-150400.4.152.2","libwebkit2gtk-4_0-37":"2.54.1-150400.4.152.2","libjavascriptcoregtk-4_0-18":"2.54.1-150400.4.152.2","libwebkit2gtk-4_1-0":"2.54.1-150400.4.152.2","typelib-1_0-WebKit2-4_1":"2.54.1-150400.4.152.2","libjavascriptcoregtk-4_1-0":"2.54.1-150400.4.152.2","typelib-1_0-WebKit2WebExtension-4_1":"2.54.1-150400.4.152.2","typelib-1_0-WebKit2-4_0":"2.54.1-150400.4.152.2"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4676-1.json"}},{"package":{"name":"webkit2gtk3-soup2","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","purl":"pkg:rpm/suse/webkit2gtk3-soup2&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-LTSS"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.54.1-150400.4.152.2"}]}],"ecosystem_specific":{"binaries":[{"libwebkitgtk-6_0-4":"2.54.1-150400.4.152.2","libwebkit2gtk-4_0-37":"2.54.1-150400.4.152.2","webkit2gtk-4_0-injected-bundles":"2.54.1-150400.4.152.2","typelib-1_0-JavaScriptCore-4_1":"2.54.1-150400.4.152.2","typelib-1_0-WebKit2WebExtension-4_0":"2.54.1-150400.4.152.2","libjavascriptcoregtk-6_0-1":"2.54.1-150400.4.152.2","typelib-1_0-WebKit2-4_0":"2.54.1-150400.4.152.2","libjavascriptcoregtk-4_0-18":"2.54.1-150400.4.152.2","WebKitGTK-6.0-lang":"2.54.1-150400.4.152.2","libwebkit2gtk-4_1-0":"2.54.1-150400.4.152.2","webkit2gtk-4_1-injected-bundles":"2.54.1-150400.4.152.2","webkit2gtk3-devel":"2.54.1-150400.4.152.2","typelib-1_0-WebKit2-4_1":"2.54.1-150400.4.152.2","webkitgtk-6_0-injected-bundles":"2.54.1-150400.4.152.2","WebKitGTK-4.1-lang":"2.54.1-150400.4.152.2","libjavascriptcoregtk-4_1-0":"2.54.1-150400.4.152.2","webkit2gtk3-soup2-devel":"2.54.1-150400.4.152.2","WebKitGTK-4.0-lang":"2.54.1-150400.4.152.2","typelib-1_0-JavaScriptCore-4_0":"2.54.1-150400.4.152.2","typelib-1_0-WebKit2WebExtension-4_1":"2.54.1-150400.4.152.2"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4676-1.json"}},{"package":{"name":"webkit2gtk4","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","purl":"pkg:rpm/suse/webkit2gtk4&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-LTSS"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.54.1-150400.4.152.2"}]}],"ecosystem_specific":{"binaries":[{"typelib-1_0-WebKit2WebExtension-4_0":"2.54.1-150400.4.152.2","libjavascriptcoregtk-6_0-1":"2.54.1-150400.4.152.2","libjavascriptcoregtk-4_0-18":"2.54.1-150400.4.152.2","WebKitGTK-4.0-lang":"2.54.1-150400.4.152.2","libwebkit2gtk-4_0-37":"2.54.1-150400.4.152.2","webkitgtk-6_0-injected-bundles":"2.54.1-150400.4.152.2","webkit2gtk3-soup2-devel":"2.54.1-150400.4.152.2","webkit2gtk-4_1-injected-bundles":"2.54.1-150400.4.152.2","typelib-1_0-WebKit2-4_0":"2.54.1-150400.4.152.2","webkit2gtk3-devel":"2.54.1-150400.4.152.2","libjavascriptcoregtk-4_1-0":"2.54.1-150400.4.152.2","typelib-1_0-WebKit2WebExtension-4_1":"2.54.1-150400.4.152.2","libwebkit2gtk-4_1-0":"2.54.1-150400.4.152.2","webkit2gtk-4_0-injected-bundles":"2.54.1-150400.4.152.2","libwebkitgtk-6_0-4":"2.54.1-150400.4.152.2","typelib-1_0-JavaScriptCore-4_1":"2.54.1-150400.4.152.2","WebKitGTK-6.0-lang":"2.54.1-150400.4.152.2","WebKitGTK-4.1-lang":"2.54.1-150400.4.152.2","typelib-1_0-JavaScriptCore-4_0":"2.54.1-150400.4.152.2","typelib-1_0-WebKit2-4_1":"2.54.1-150400.4.152.2"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4676-1.json"}},{"package":{"name":"webkit2gtk3","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","purl":"pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP5-ESPOS"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.54.1-150400.4.152.2"}]}],"ecosystem_specific":{"binaries":[{"libjavascriptcoregtk-4_1-0":"2.54.1-150400.4.152.2","libwebkitgtk-6_0-4":"2.54.1-150400.4.152.2","webkit2gtk-4_0-injected-bundles":"2.54.1-150400.4.152.2","webkit2gtk3-soup2-devel":"2.54.1-150400.4.152.2","WebKitGTK-4.0-lang":"2.54.1-150400.4.152.2","libjavascriptcoregtk-6_0-1":"2.54.1-150400.4.152.2","libjavascriptcoregtk-4_0-18":"2.54.1-150400.4.152.2","typelib-1_0-WebKit2-4_1":"2.54.1-150400.4.152.2","WebKitGTK-4.1-lang":"2.54.1-150400.4.152.2","WebKitGTK-6.0-lang":"2.54.1-150400.4.152.2","typelib-1_0-WebKit2WebExtension-4_0":"2.54.1-150400.4.152.2","typelib-1_0-WebKit2WebExtension-4_1":"2.54.1-150400.4.152.2","webkit2gtk3-devel":"2.54.1-150400.4.152.2","typelib-1_0-WebKit2-4_0":"2.54.1-150400.4.152.2","webkit2gtk-4_1-injected-bundles":"2.54.1-150400.4.152.2","libwebkit2gtk-4_1-0":"2.54.1-150400.4.152.2","typelib-1_0-JavaScriptCore-4_1":"2.54.1-150400.4.152.2","libwebkit2gtk-4_0-37":"2.54.1-150400.4.152.2","webkitgtk-6_0-injected-bundles":"2.54.1-150400.4.152.2","typelib-1_0-JavaScriptCore-4_0":"2.54.1-150400.4.152.2"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4676-1.json"}},{"package":{"name":"webkit2gtk3-soup2","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","purl":"pkg:rpm/suse/webkit2gtk3-soup2&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP5-ESPOS"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.54.1-150400.4.152.2"}]}],"ecosystem_specific":{"binaries":[{"libwebkit2gtk-4_1-0":"2.54.1-150400.4.152.2","WebKitGTK-4.1-lang":"2.54.1-150400.4.152.2","WebKitGTK-6.0-lang":"2.54.1-150400.4.152.2","libjavascriptcoregtk-4_1-0":"2.54.1-150400.4.152.2","webkit2gtk3-soup2-devel":"2.54.1-150400.4.152.2","WebKitGTK-4.0-lang":"2.54.1-150400.4.152.2","libwebkit2gtk-4_0-37":"2.54.1-150400.4.152.2","typelib-1_0-WebKit2WebExtension-4_0":"2.54.1-150400.4.152.2","typelib-1_0-WebKit2WebExtension-4_1":"2.54.1-150400.4.152.2","typelib-1_0-WebKit2-4_1":"2.54.1-150400.4.152.2","webkitgtk-6_0-injected-bundles":"2.54.1-150400.4.152.2","libjavascriptcoregtk-4_0-18":"2.54.1-150400.4.152.2","typelib-1_0-WebKit2-4_0":"2.54.1-150400.4.152.2","webkit2gtk3-devel":"2.54.1-150400.4.152.2","libwebkitgtk-6_0-4":"2.54.1-150400.4.152.2","webkit2gtk-4_1-injected-bundles":"2.54.1-150400.4.152.2","libjavascriptcoregtk-6_0-1":"2.54.1-150400.4.152.2","typelib-1_0-JavaScriptCore-4_1":"2.54.1-150400.4.152.2","typelib-1_0-JavaScriptCore-4_0":"2.54.1-150400.4.152.2","webkit2gtk-4_0-injected-bundles":"2.54.1-150400.4.152.2"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4676-1.json"}},{"package":{"name":"webkit2gtk4","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","purl":"pkg:rpm/suse/webkit2gtk4&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP5-ESPOS"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.54.1-150400.4.152.2"}]}],"ecosystem_specific":{"binaries":[{"libjavascriptcoregtk-6_0-1":"2.54.1-150400.4.152.2","WebKitGTK-6.0-lang":"2.54.1-150400.4.152.2","libwebkit2gtk-4_0-37":"2.54.1-150400.4.152.2","typelib-1_0-JavaScriptCore-4_1":"2.54.1-150400.4.152.2","webkit2gtk3-soup2-devel":"2.54.1-150400.4.152.2","libjavascriptcoregtk-4_1-0":"2.54.1-150400.4.152.2","webkit2gtk-4_0-injected-bundles":"2.54.1-150400.4.152.2","typelib-1_0-JavaScriptCore-4_0":"2.54.1-150400.4.152.2","WebKitGTK-4.1-lang":"2.54.1-150400.4.152.2","libjavascriptcoregtk-4_0-18":"2.54.1-150400.4.152.2","typelib-1_0-WebKit2WebExtension-4_1":"2.54.1-150400.4.152.2","WebKitGTK-4.0-lang":"2.54.1-150400.4.152.2","typelib-1_0-WebKit2-4_0":"2.54.1-150400.4.152.2","typelib-1_0-WebKit2-4_1":"2.54.1-150400.4.152.2","webkit2gtk-4_1-injected-bundles":"2.54.1-150400.4.152.2","webkitgtk-6_0-injected-bundles":"2.54.1-150400.4.152.2","libwebkitgtk-6_0-4":"2.54.1-150400.4.152.2","libwebkit2gtk-4_1-0":"2.54.1-150400.4.152.2","webkit2gtk3-devel":"2.54.1-150400.4.152.2","typelib-1_0-WebKit2WebExtension-4_0":"2.54.1-150400.4.152.2"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4676-1.json"}},{"package":{"name":"webkit2gtk3","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","purl":"pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP5-LTSS"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.54.1-150400.4.152.2"}]}],"ecosystem_specific":{"binaries":[{"webkit2gtk3-devel":"2.54.1-150400.4.152.2","typelib-1_0-JavaScriptCore-4_1":"2.54.1-150400.4.152.2","libjavascriptcoregtk-4_1-0":"2.54.1-150400.4.152.2","typelib-1_0-WebKit2-4_1":"2.54.1-150400.4.152.2","webkitgtk-6_0-injected-bundles":"2.54.1-150400.4.152.2","typelib-1_0-JavaScriptCore-4_0":"2.54.1-150400.4.152.2","libwebkitgtk-6_0-4":"2.54.1-150400.4.152.2","webkit2gtk3-soup2-devel":"2.54.1-150400.4.152.2","typelib-1_0-WebKit2-4_0":"2.54.1-150400.4.152.2","WebKitGTK-4.0-lang":"2.54.1-150400.4.152.2","libjavascriptcoregtk-4_0-18":"2.54.1-150400.4.152.2","libwebkit2gtk-4_0-37":"2.54.1-150400.4.152.2","webkit2gtk-4_0-injected-bundles":"2.54.1-150400.4.152.2","libjavascriptcoregtk-6_0-1":"2.54.1-150400.4.152.2","typelib-1_0-WebKit2WebExtension-4_1":"2.54.1-150400.4.152.2","WebKitGTK-4.1-lang":"2.54.1-150400.4.152.2","WebKitGTK-6.0-lang":"2.54.1-150400.4.152.2","webkit2gtk-4_1-injected-bundles":"2.54.1-150400.4.152.2","typelib-1_0-WebKit2WebExtension-4_0":"2.54.1-150400.4.152.2","libwebkit2gtk-4_1-0":"2.54.1-150400.4.152.2"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4676-1.json"}},{"package":{"name":"webkit2gtk3-soup2","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","purl":"pkg:rpm/suse/webkit2gtk3-soup2&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP5-LTSS"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.54.1-150400.4.152.2"}]}],"ecosystem_specific":{"binaries":[{"libwebkit2gtk-4_1-0":"2.54.1-150400.4.152.2","libwebkitgtk-6_0-4":"2.54.1-150400.4.152.2","libjavascriptcoregtk-6_0-1":"2.54.1-150400.4.152.2","webkit2gtk3-devel":"2.54.1-150400.4.152.2","typelib-1_0-JavaScriptCore-4_0":"2.54.1-150400.4.152.2","webkitgtk-6_0-injected-bundles":"2.54.1-150400.4.152.2","typelib-1_0-WebKit2WebExtension-4_1":"2.54.1-150400.4.152.2","webkit2gtk-4_0-injected-bundles":"2.54.1-150400.4.152.2","typelib-1_0-WebKit2-4_1":"2.54.1-150400.4.152.2","WebKitGTK-4.0-lang":"2.54.1-150400.4.152.2","libjavascriptcoregtk-4_0-18":"2.54.1-150400.4.152.2","typelib-1_0-WebKit2WebExtension-4_0":"2.54.1-150400.4.152.2","WebKitGTK-6.0-lang":"2.54.1-150400.4.152.2","webkit2gtk-4_1-injected-bundles":"2.54.1-150400.4.152.2","libjavascriptcoregtk-4_1-0":"2.54.1-150400.4.152.2","webkit2gtk3-soup2-devel":"2.54.1-150400.4.152.2","typelib-1_0-WebKit2-4_0":"2.54.1-150400.4.152.2","WebKitGTK-4.1-lang":"2.54.1-150400.4.152.2","libwebkit2gtk-4_0-37":"2.54.1-150400.4.152.2","typelib-1_0-JavaScriptCore-4_1":"2.54.1-150400.4.152.2"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4676-1.json"}},{"package":{"name":"webkit2gtk4","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","purl":"pkg:rpm/suse/webkit2gtk4&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP5-LTSS"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.54.1-150400.4.152.2"}]}],"ecosystem_specific":{"binaries":[{"libjavascriptcoregtk-4_0-18":"2.54.1-150400.4.152.2","webkit2gtk3-devel":"2.54.1-150400.4.152.2","webkit2gtk-4_1-injected-bundles":"2.54.1-150400.4.152.2","typelib-1_0-WebKit2WebExtension-4_1":"2.54.1-150400.4.152.2","libwebkitgtk-6_0-4":"2.54.1-150400.4.152.2","WebKitGTK-4.0-lang":"2.54.1-150400.4.152.2","typelib-1_0-JavaScriptCore-4_0":"2.54.1-150400.4.152.2","libjavascriptcoregtk-4_1-0":"2.54.1-150400.4.152.2","libwebkit2gtk-4_0-37":"2.54.1-150400.4.152.2","webkitgtk-6_0-injected-bundles":"2.54.1-150400.4.152.2","webkit2gtk3-soup2-devel":"2.54.1-150400.4.152.2","webkit2gtk-4_0-injected-bundles":"2.54.1-150400.4.152.2","typelib-1_0-WebKit2-4_1":"2.54.1-150400.4.152.2","typelib-1_0-WebKit2-4_0":"2.54.1-150400.4.152.2","WebKitGTK-4.1-lang":"2.54.1-150400.4.152.2","libjavascriptcoregtk-6_0-1":"2.54.1-150400.4.152.2","typelib-1_0-JavaScriptCore-4_1":"2.54.1-150400.4.152.2","libwebkit2gtk-4_1-0":"2.54.1-150400.4.152.2","typelib-1_0-WebKit2WebExtension-4_0":"2.54.1-150400.4.152.2","WebKitGTK-6.0-lang":"2.54.1-150400.4.152.2"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4676-1.json"}},{"package":{"name":"webkit2gtk3","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","purl":"pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP4-LTSS"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.54.1-150400.4.152.2"}]}],"ecosystem_specific":{"binaries":[{"WebKitGTK-6.0-lang":"2.54.1-150400.4.152.2","typelib-1_0-JavaScriptCore-4_0":"2.54.1-150400.4.152.2","libwebkit2gtk-4_1-0":"2.54.1-150400.4.152.2","WebKitGTK-4.1-lang":"2.54.1-150400.4.152.2","typelib-1_0-WebKit2WebExtension-4_0":"2.54.1-150400.4.152.2","webkit2gtk-4_0-injected-bundles":"2.54.1-150400.4.152.2","typelib-1_0-WebKit2-4_0":"2.54.1-150400.4.152.2","libjavascriptcoregtk-4_1-0":"2.54.1-150400.4.152.2","libwebkit2gtk-4_0-37":"2.54.1-150400.4.152.2","webkit2gtk3-devel":"2.54.1-150400.4.152.2","WebKitGTK-4.0-lang":"2.54.1-150400.4.152.2","webkit2gtk-4_1-injected-bundles":"2.54.1-150400.4.152.2","libjavascriptcoregtk-6_0-1":"2.54.1-150400.4.152.2","libjavascriptcoregtk-4_0-18":"2.54.1-150400.4.152.2","webkitgtk-6_0-injected-bundles":"2.54.1-150400.4.152.2","typelib-1_0-JavaScriptCore-4_1":"2.54.1-150400.4.152.2","webkit2gtk3-soup2-devel":"2.54.1-150400.4.152.2","typelib-1_0-WebKit2WebExtension-4_1":"2.54.1-150400.4.152.2","typelib-1_0-WebKit2-4_1":"2.54.1-150400.4.152.2","libwebkitgtk-6_0-4":"2.54.1-150400.4.152.2"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4676-1.json"}},{"package":{"name":"webkit2gtk3-soup2","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","purl":"pkg:rpm/suse/webkit2gtk3-soup2&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP4-LTSS"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.54.1-150400.4.152.2"}]}],"ecosystem_specific":{"binaries":[{"typelib-1_0-WebKit2WebExtension-4_1":"2.54.1-150400.4.152.2","libwebkit2gtk-4_1-0":"2.54.1-150400.4.152.2","WebKitGTK-4.1-lang":"2.54.1-150400.4.152.2","libwebkitgtk-6_0-4":"2.54.1-150400.4.152.2","WebKitGTK-6.0-lang":"2.54.1-150400.4.152.2","webkit2gtk-4_0-injected-bundles":"2.54.1-150400.4.152.2","libjavascriptcoregtk-4_1-0":"2.54.1-150400.4.152.2","webkitgtk-6_0-injected-bundles":"2.54.1-150400.4.152.2","typelib-1_0-WebKit2WebExtension-4_0":"2.54.1-150400.4.152.2","typelib-1_0-JavaScriptCore-4_1":"2.54.1-150400.4.152.2","webkit2gtk3-devel":"2.54.1-150400.4.152.2","libjavascriptcoregtk-6_0-1":"2.54.1-150400.4.152.2","typelib-1_0-WebKit2-4_0":"2.54.1-150400.4.152.2","libjavascriptcoregtk-4_0-18":"2.54.1-150400.4.152.2","WebKitGTK-4.0-lang":"2.54.1-150400.4.152.2","libwebkit2gtk-4_0-37":"2.54.1-150400.4.152.2","webkit2gtk3-soup2-devel":"2.54.1-150400.4.152.2","typelib-1_0-WebKit2-4_1":"2.54.1-150400.4.152.2","webkit2gtk-4_1-injected-bundles":"2.54.1-150400.4.152.2","typelib-1_0-JavaScriptCore-4_0":"2.54.1-150400.4.152.2"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4676-1.json"}},{"package":{"name":"webkit2gtk4","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","purl":"pkg:rpm/suse/webkit2gtk4&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP4-LTSS"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.54.1-150400.4.152.2"}]}],"ecosystem_specific":{"binaries":[{"typelib-1_0-JavaScriptCore-4_0":"2.54.1-150400.4.152.2","webkit2gtk3-soup2-devel":"2.54.1-150400.4.152.2","libwebkitgtk-6_0-4":"2.54.1-150400.4.152.2","libjavascriptcoregtk-4_0-18":"2.54.1-150400.4.152.2","WebKitGTK-4.1-lang":"2.54.1-150400.4.152.2","typelib-1_0-JavaScriptCore-4_1":"2.54.1-150400.4.152.2","typelib-1_0-WebKit2-4_0":"2.54.1-150400.4.152.2","typelib-1_0-WebKit2-4_1":"2.54.1-150400.4.152.2","typelib-1_0-WebKit2WebExtension-4_1":"2.54.1-150400.4.152.2","libjavascriptcoregtk-6_0-1":"2.54.1-150400.4.152.2","webkit2gtk-4_0-injected-bundles":"2.54.1-150400.4.152.2","webkitgtk-6_0-injected-bundles":"2.54.1-150400.4.152.2","libjavascriptcoregtk-4_1-0":"2.54.1-150400.4.152.2","libwebkit2gtk-4_0-37":"2.54.1-150400.4.152.2","webkit2gtk-4_1-injected-bundles":"2.54.1-150400.4.152.2","webkit2gtk3-devel":"2.54.1-150400.4.152.2","typelib-1_0-WebKit2WebExtension-4_0":"2.54.1-150400.4.152.2","libwebkit2gtk-4_1-0":"2.54.1-150400.4.152.2","WebKitGTK-6.0-lang":"2.54.1-150400.4.152.2","WebKitGTK-4.0-lang":"2.54.1-150400.4.152.2"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4676-1.json"}},{"package":{"name":"webkit2gtk3","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","purl":"pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP5-LTSS"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.54.1-150400.4.152.2"}]}],"ecosystem_specific":{"binaries":[{"webkit2gtk3-devel":"2.54.1-150400.4.152.2","typelib-1_0-WebKit2-4_1":"2.54.1-150400.4.152.2","libwebkit2gtk-4_1-0":"2.54.1-150400.4.152.2","typelib-1_0-JavaScriptCore-4_0":"2.54.1-150400.4.152.2","typelib-1_0-JavaScriptCore-4_1":"2.54.1-150400.4.152.2","libjavascriptcoregtk-4_1-0":"2.54.1-150400.4.152.2","libwebkitgtk-6_0-4":"2.54.1-150400.4.152.2","typelib-1_0-WebKit2WebExtension-4_1":"2.54.1-150400.4.152.2","webkitgtk-6_0-injected-bundles":"2.54.1-150400.4.152.2","WebKitGTK-4.1-lang":"2.54.1-150400.4.152.2","typelib-1_0-WebKit2WebExtension-4_0":"2.54.1-150400.4.152.2","webkit2gtk3-soup2-devel":"2.54.1-150400.4.152.2","typelib-1_0-WebKit2-4_0":"2.54.1-150400.4.152.2","libjavascriptcoregtk-6_0-1":"2.54.1-150400.4.152.2","libjavascriptcoregtk-4_0-18":"2.54.1-150400.4.152.2","libwebkit2gtk-4_0-37":"2.54.1-150400.4.152.2","WebKitGTK-4.0-lang":"2.54.1-150400.4.152.2","webkit2gtk-4_0-injected-bundles":"2.54.1-150400.4.152.2","webkit2gtk-4_1-injected-bundles":"2.54.1-150400.4.152.2","WebKitGTK-6.0-lang":"2.54.1-150400.4.152.2"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4676-1.json"}},{"package":{"name":"webkit2gtk3-soup2","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","purl":"pkg:rpm/suse/webkit2gtk3-soup2&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP5-LTSS"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.54.1-150400.4.152.2"}]}],"ecosystem_specific":{"binaries":[{"typelib-1_0-WebKit2WebExtension-4_1":"2.54.1-150400.4.152.2","libjavascriptcoregtk-4_0-18":"2.54.1-150400.4.152.2","typelib-1_0-JavaScriptCore-4_0":"2.54.1-150400.4.152.2","typelib-1_0-WebKit2-4_0":"2.54.1-150400.4.152.2","webkit2gtk3-soup2-devel":"2.54.1-150400.4.152.2","libwebkit2gtk-4_0-37":"2.54.1-150400.4.152.2","libwebkit2gtk-4_1-0":"2.54.1-150400.4.152.2","libjavascriptcoregtk-4_1-0":"2.54.1-150400.4.152.2","typelib-1_0-WebKit2WebExtension-4_0":"2.54.1-150400.4.152.2","webkit2gtk-4_1-injected-bundles":"2.54.1-150400.4.152.2","libjavascriptcoregtk-6_0-1":"2.54.1-150400.4.152.2","typelib-1_0-JavaScriptCore-4_1":"2.54.1-150400.4.152.2","libwebkitgtk-6_0-4":"2.54.1-150400.4.152.2","webkitgtk-6_0-injected-bundles":"2.54.1-150400.4.152.2","WebKitGTK-6.0-lang":"2.54.1-150400.4.152.2","WebKitGTK-4.1-lang":"2.54.1-150400.4.152.2","webkit2gtk-4_0-injected-bundles":"2.54.1-150400.4.152.2","webkit2gtk3-devel":"2.54.1-150400.4.152.2","typelib-1_0-WebKit2-4_1":"2.54.1-150400.4.152.2","WebKitGTK-4.0-lang":"2.54.1-150400.4.152.2"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4676-1.json"}},{"package":{"name":"webkit2gtk4","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","purl":"pkg:rpm/suse/webkit2gtk4&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP5-LTSS"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.54.1-150400.4.152.2"}]}],"ecosystem_specific":{"binaries":[{"webkit2gtk-4_0-injected-bundles":"2.54.1-150400.4.152.2","typelib-1_0-WebKit2WebExtension-4_1":"2.54.1-150400.4.152.2","libjavascriptcoregtk-4_0-18":"2.54.1-150400.4.152.2","typelib-1_0-WebKit2-4_0":"2.54.1-150400.4.152.2","webkitgtk-6_0-injected-bundles":"2.54.1-150400.4.152.2","libjavascriptcoregtk-4_1-0":"2.54.1-150400.4.152.2","libwebkitgtk-6_0-4":"2.54.1-150400.4.152.2","typelib-1_0-JavaScriptCore-4_0":"2.54.1-150400.4.152.2","WebKitGTK-6.0-lang":"2.54.1-150400.4.152.2","typelib-1_0-WebKit2-4_1":"2.54.1-150400.4.152.2","WebKitGTK-4.0-lang":"2.54.1-150400.4.152.2","libwebkit2gtk-4_0-37":"2.54.1-150400.4.152.2","webkit2gtk3-soup2-devel":"2.54.1-150400.4.152.2","WebKitGTK-4.1-lang":"2.54.1-150400.4.152.2","libjavascriptcoregtk-6_0-1":"2.54.1-150400.4.152.2","webkit2gtk3-devel":"2.54.1-150400.4.152.2","webkit2gtk-4_1-injected-bundles":"2.54.1-150400.4.152.2","libwebkit2gtk-4_1-0":"2.54.1-150400.4.152.2","typelib-1_0-JavaScriptCore-4_1":"2.54.1-150400.4.152.2","typelib-1_0-WebKit2WebExtension-4_0":"2.54.1-150400.4.152.2"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4676-1.json"}},{"package":{"name":"webkit2gtk3","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","purl":"pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.54.1-150400.4.152.2"}]}],"ecosystem_specific":{"binaries":[{"libwebkit2gtk-4_0-37":"2.54.1-150400.4.152.2","libjavascriptcoregtk-4_0-18":"2.54.1-150400.4.152.2","webkit2gtk-4_1-injected-bundles":"2.54.1-150400.4.152.2","libjavascriptcoregtk-4_1-0":"2.54.1-150400.4.152.2","typelib-1_0-WebKit2WebExtension-4_0":"2.54.1-150400.4.152.2","typelib-1_0-WebKit2WebExtension-4_1":"2.54.1-150400.4.152.2","webkit2gtk3-soup2-devel":"2.54.1-150400.4.152.2","typelib-1_0-JavaScriptCore-4_0":"2.54.1-150400.4.152.2","typelib-1_0-WebKit2-4_0":"2.54.1-150400.4.152.2","typelib-1_0-JavaScriptCore-4_1":"2.54.1-150400.4.152.2","libwebkitgtk-6_0-4":"2.54.1-150400.4.152.2","WebKitGTK-6.0-lang":"2.54.1-150400.4.152.2","webkitgtk-6_0-injected-bundles":"2.54.1-150400.4.152.2","libwebkit2gtk-4_1-0":"2.54.1-150400.4.152.2","webkit2gtk-4_0-injected-bundles":"2.54.1-150400.4.152.2","WebKitGTK-4.1-lang":"2.54.1-150400.4.152.2","WebKitGTK-4.0-lang":"2.54.1-150400.4.152.2","webkit2gtk3-devel":"2.54.1-150400.4.152.2","typelib-1_0-WebKit2-4_1":"2.54.1-150400.4.152.2","libjavascriptcoregtk-6_0-1":"2.54.1-150400.4.152.2"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4676-1.json"}},{"package":{"name":"webkit2gtk3-soup2","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","purl":"pkg:rpm/suse/webkit2gtk3-soup2&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.54.1-150400.4.152.2"}]}],"ecosystem_specific":{"binaries":[{"webkit2gtk-4_0-injected-bundles":"2.54.1-150400.4.152.2","webkit2gtk3-soup2-devel":"2.54.1-150400.4.152.2","WebKitGTK-4.0-lang":"2.54.1-150400.4.152.2","libjavascriptcoregtk-6_0-1":"2.54.1-150400.4.152.2","typelib-1_0-WebKit2-4_1":"2.54.1-150400.4.152.2","libwebkit2gtk-4_1-0":"2.54.1-150400.4.152.2","webkit2gtk3-devel":"2.54.1-150400.4.152.2","typelib-1_0-WebKit2WebExtension-4_0":"2.54.1-150400.4.152.2","typelib-1_0-JavaScriptCore-4_1":"2.54.1-150400.4.152.2","typelib-1_0-JavaScriptCore-4_0":"2.54.1-150400.4.152.2","libjavascriptcoregtk-4_0-18":"2.54.1-150400.4.152.2","WebKitGTK-6.0-lang":"2.54.1-150400.4.152.2","libjavascriptcoregtk-4_1-0":"2.54.1-150400.4.152.2","webkitgtk-6_0-injected-bundles":"2.54.1-150400.4.152.2","typelib-1_0-WebKit2WebExtension-4_1":"2.54.1-150400.4.152.2","libwebkit2gtk-4_0-37":"2.54.1-150400.4.152.2","webkit2gtk-4_1-injected-bundles":"2.54.1-150400.4.152.2","libwebkitgtk-6_0-4":"2.54.1-150400.4.152.2","typelib-1_0-WebKit2-4_0":"2.54.1-150400.4.152.2","WebKitGTK-4.1-lang":"2.54.1-150400.4.152.2"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4676-1.json"}},{"package":{"name":"webkit2gtk4","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","purl":"pkg:rpm/suse/webkit2gtk4&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.54.1-150400.4.152.2"}]}],"ecosystem_specific":{"binaries":[{"webkitgtk-6_0-injected-bundles":"2.54.1-150400.4.152.2","WebKitGTK-4.1-lang":"2.54.1-150400.4.152.2","webkit2gtk-4_1-injected-bundles":"2.54.1-150400.4.152.2","libjavascriptcoregtk-4_0-18":"2.54.1-150400.4.152.2","typelib-1_0-WebKit2-4_0":"2.54.1-150400.4.152.2","webkit2gtk3-soup2-devel":"2.54.1-150400.4.152.2","typelib-1_0-WebKit2WebExtension-4_0":"2.54.1-150400.4.152.2","webkit2gtk-4_0-injected-bundles":"2.54.1-150400.4.152.2","typelib-1_0-WebKit2WebExtension-4_1":"2.54.1-150400.4.152.2","webkit2gtk3-devel":"2.54.1-150400.4.152.2","typelib-1_0-JavaScriptCore-4_1":"2.54.1-150400.4.152.2","libwebkit2gtk-4_1-0":"2.54.1-150400.4.152.2","WebKitGTK-4.0-lang":"2.54.1-150400.4.152.2","typelib-1_0-JavaScriptCore-4_0":"2.54.1-150400.4.152.2","libwebkitgtk-6_0-4":"2.54.1-150400.4.152.2","typelib-1_0-WebKit2-4_1":"2.54.1-150400.4.152.2","libjavascriptcoregtk-6_0-1":"2.54.1-150400.4.152.2","libjavascriptcoregtk-4_1-0":"2.54.1-150400.4.152.2","WebKitGTK-6.0-lang":"2.54.1-150400.4.152.2","libwebkit2gtk-4_0-37":"2.54.1-150400.4.152.2"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4676-1.json"}},{"package":{"name":"webkit2gtk3","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","purl":"pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP5"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.54.1-150400.4.152.2"}]}],"ecosystem_specific":{"binaries":[{"WebKitGTK-4.1-lang":"2.54.1-150400.4.152.2","webkit2gtk3-devel":"2.54.1-150400.4.152.2","libwebkit2gtk-4_0-37":"2.54.1-150400.4.152.2","webkit2gtk-4_0-injected-bundles":"2.54.1-150400.4.152.2","libwebkit2gtk-4_1-0":"2.54.1-150400.4.152.2","libjavascriptcoregtk-6_0-1":"2.54.1-150400.4.152.2","typelib-1_0-WebKit2WebExtension-4_1":"2.54.1-150400.4.152.2","typelib-1_0-WebKit2-4_1":"2.54.1-150400.4.152.2","typelib-1_0-WebKit2-4_0":"2.54.1-150400.4.152.2","typelib-1_0-WebKit2WebExtension-4_0":"2.54.1-150400.4.152.2","webkitgtk-6_0-injected-bundles":"2.54.1-150400.4.152.2","libjavascriptcoregtk-4_1-0":"2.54.1-150400.4.152.2","WebKitGTK-4.0-lang":"2.54.1-150400.4.152.2","typelib-1_0-JavaScriptCore-4_0":"2.54.1-150400.4.152.2","webkit2gtk-4_1-injected-bundles":"2.54.1-150400.4.152.2","libjavascriptcoregtk-4_0-18":"2.54.1-150400.4.152.2","libwebkitgtk-6_0-4":"2.54.1-150400.4.152.2","typelib-1_0-JavaScriptCore-4_1":"2.54.1-150400.4.152.2","webkit2gtk3-soup2-devel":"2.54.1-150400.4.152.2","WebKitGTK-6.0-lang":"2.54.1-150400.4.152.2"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4676-1.json"}},{"package":{"name":"webkit2gtk3-soup2","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","purl":"pkg:rpm/suse/webkit2gtk3-soup2&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP5"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.54.1-150400.4.152.2"}]}],"ecosystem_specific":{"binaries":[{"WebKitGTK-6.0-lang":"2.54.1-150400.4.152.2","libjavascriptcoregtk-4_1-0":"2.54.1-150400.4.152.2","WebKitGTK-4.0-lang":"2.54.1-150400.4.152.2","WebKitGTK-4.1-lang":"2.54.1-150400.4.152.2","webkit2gtk-4_1-injected-bundles":"2.54.1-150400.4.152.2","typelib-1_0-WebKit2WebExtension-4_0":"2.54.1-150400.4.152.2","libwebkitgtk-6_0-4":"2.54.1-150400.4.152.2","typelib-1_0-JavaScriptCore-4_0":"2.54.1-150400.4.152.2","typelib-1_0-WebKit2WebExtension-4_1":"2.54.1-150400.4.152.2","libjavascriptcoregtk-4_0-18":"2.54.1-150400.4.152.2","webkitgtk-6_0-injected-bundles":"2.54.1-150400.4.152.2","typelib-1_0-WebKit2-4_0":"2.54.1-150400.4.152.2","libwebkit2gtk-4_0-37":"2.54.1-150400.4.152.2","webkit2gtk-4_0-injected-bundles":"2.54.1-150400.4.152.2","webkit2gtk3-devel":"2.54.1-150400.4.152.2","libjavascriptcoregtk-6_0-1":"2.54.1-150400.4.152.2","typelib-1_0-WebKit2-4_1":"2.54.1-150400.4.152.2","webkit2gtk3-soup2-devel":"2.54.1-150400.4.152.2","typelib-1_0-JavaScriptCore-4_1":"2.54.1-150400.4.152.2","libwebkit2gtk-4_1-0":"2.54.1-150400.4.152.2"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4676-1.json"}},{"package":{"name":"webkit2gtk4","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","purl":"pkg:rpm/suse/webkit2gtk4&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP5"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.54.1-150400.4.152.2"}]}],"ecosystem_specific":{"binaries":[{"webkit2gtk-4_0-injected-bundles":"2.54.1-150400.4.152.2","webkit2gtk-4_1-injected-bundles":"2.54.1-150400.4.152.2","libwebkit2gtk-4_0-37":"2.54.1-150400.4.152.2","WebKitGTK-4.0-lang":"2.54.1-150400.4.152.2","typelib-1_0-WebKit2WebExtension-4_1":"2.54.1-150400.4.152.2","typelib-1_0-WebKit2-4_0":"2.54.1-150400.4.152.2","webkit2gtk3-devel":"2.54.1-150400.4.152.2","libwebkitgtk-6_0-4":"2.54.1-150400.4.152.2","typelib-1_0-WebKit2WebExtension-4_0":"2.54.1-150400.4.152.2","WebKitGTK-6.0-lang":"2.54.1-150400.4.152.2","typelib-1_0-WebKit2-4_1":"2.54.1-150400.4.152.2","webkitgtk-6_0-injected-bundles":"2.54.1-150400.4.152.2","libwebkit2gtk-4_1-0":"2.54.1-150400.4.152.2","libjavascriptcoregtk-4_0-18":"2.54.1-150400.4.152.2","typelib-1_0-JavaScriptCore-4_1":"2.54.1-150400.4.152.2","libjavascriptcoregtk-4_1-0":"2.54.1-150400.4.152.2","typelib-1_0-JavaScriptCore-4_0":"2.54.1-150400.4.152.2","webkit2gtk3-soup2-devel":"2.54.1-150400.4.152.2","WebKitGTK-4.1-lang":"2.54.1-150400.4.152.2","libjavascriptcoregtk-6_0-1":"2.54.1-150400.4.152.2"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4676-1.json"}}],"schema_version":"1.9.0"}