Alpine/qt6-qtwebengine: medium 4.3
Insufficient validation of untrusted input in Core in Google Chrome prior to 139.0.7258.66 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. (Chromium s
Action: Upgrade qt6-qtwebengine to the fixed version for your line (see fixed_versions).
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 6.9.1-r3 | - |
Fixed versions
| 6.9.1-r3 | 6.9.3-r2 |
Sources
- osv: ALPINE-CVE-2025-8582#Alpine:v3.23/qt6-qtwebengine
- https://security.alpinelinux.org/vuln/CVE-2025-8582
published · modified · JSON