{"action":"Upgrade wpewebkit to 2.28.4-1 or later.","affected":[{"fixed":"2.28.4-1","introduced":"0"}],"component":"wpewebkit","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:14","exploited":false,"fixed_versions":["2.28.4-1"],"id":"tcs_01M5NF9T2HFPW0Z2HBQS4AKAT0","modified_at":"2026-09-11T11:02:50.463729048Z","published_at":"2020-10-16T17:15:15.433Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2020-9862","https://security-tracker.debian.org/tracker/CVE-2020-9862"],"severity":{"label":"high","score":7.8},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2020-9862#Debian:14/wpewebkit","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2020-9862"}],"summary":"A command injection issue existed in Web Inspector. This issue was addressed with improved escaping. This issue is fixed in iOS 13.6 and iPadOS 13.6, tvOS 13.4.8, watchOS 6.2.8, Safari 13.1.2, iTunes"}