tocsin

Debian/lexbor: high 7.5

Lexbor is a web browser engine library. Prior to 2.7.0, a type‑confusion vulnerability exists in Lexbor’s HTML fragment parser. When ns = UNDEF, a comment is created using the “unknown element” constr

Action: Upgrade lexbor to 3.0.0-1 or later.

Affected

introducedfixedlast affected
03.0.0-1-

Fixed versions

3.0.0-1

Sources

published · modified · JSON