CVE catalog

CVE-2023-40397

webkit2gtk affected and fixed versions

The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.5. A remote attacker may be able to cause arbitrary javascript code execution.

Severity: Critical · CVSS 9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Published: Jul 24, 2023, 10:00:00 PM UTC
Source: [NVD] · [CVE record]
EPSS: 1.67% · Oct 27, 2026

Projects and upstream resources

Reported versions and fixes

Each observation applies to its named package, distribution, and release. Distribution backports can fix a vulnerability while retaining an older upstream version number.

Version impact has not been established. The original provider fields are retained below.

Provider details and historical evidence

Original provider fields

{
  "package_releases": [
    {
      "name": "wpewebkit",
      "status": "fixed",
      "release": "sid",
      "version": "2.54.2-1"
    },
    {
      "name": "wpewebkit",
      "status": "fixed",
      "release": "forky",
      "version": "2.54.1-1"
    },
    {
      "name": "wpewebkit",
      "status": "fixed",
      "release": "trixie",
      "version": "2.48.3-1"
    },
    {
      "name": "wpewebkit",
      "status": "vulnerable",
      "release": "bookworm",
      "version": "2.38.6-1"
    },
    {
      "name": "webkit2gtk",
      "status": "fixed",
      "release": "sid",
      "version": "2.54.2-2"
    },
    {
      "name": "webkit2gtk",
      "status": "fixed",
      "release": "forky",
      "version": "2.52.6-1"
    },
    {
      "name": "webkit2gtk",
      "status": "fixed",
      "release": "trixie",
      "version": "2.52.6-1~deb13u1"
    },
    {
      "name": "webkit2gtk",
      "status": "fixed",
      "release": "trixie-security",
      "version": "2.54.0-1~deb13u3"
    },
    {
      "name": "webkit2gtk",
      "status": "fixed",
      "release": "bookworm",
      "version": "2.50.6-1~deb12u2"
    },
    {
      "name": "webkit2gtk",
      "status": "fixed",
      "release": "bookworm-security",
      "version": "2.50.6-1~deb12u1"
    }
  ],
  "fixed_versions": [
    {
      "bug": null,
      "name": "wpewebkit",
      "type": "source",
      "origin": null,
      "release": "sid",
      "urgency": "not yet assigned",
      "fixed_version": "2.40.5-1"
    },
    {
      "bug": null,
      "name": "wpewebkit",
      "type": "source",
      "origin": null,
      "release": "forky",
      "urgency": "not yet assigned",
      "fixed_version": "2.40.5-1"
    },
    {
      "bug": null,
      "name": "wpewebkit",
      "type": "source",
      "origin": null,
      "release": "trixie",
      "urgency": "not yet assigned",
      "fixed_version": "2.40.5-1"
    },
    {
      "bug": null,
      "name": "wpewebkit",
      "type": "source",
      "origin": null,
      "release": "bookworm",
      "urgency": "not yet assigned",
      "fixed_version": ""
    },
    {
      "bug": null,
      "name": "webkit2gtk",
      "type": "source",
      "origin": null,
      "release": "sid",
      "urgency": "not yet assigned",
      "fixed_version": "2.40.5-1"
    },
    {
      "bug": null,
      "name": "webkit2gtk",
      "type": "source",
      "origin": null,
      "release": "forky",
      "urgency": "not yet assigned",
      "fixed_version": "2.40.5-1"
    },
    {
      "bug": null,
      "name": "webkit2gtk",
      "type": "source",
      "origin": null,
      "release": "trixie",
      "urgency": "not yet assigned",
      "fixed_version": "2.40.5-1"
    },
    {
      "bug": null,
      "name": "webkit2gtk",
      "type": "source",
      "origin": null,
      "release": "bookworm",
      "urgency": "not yet assigned",
      "fixed_version": "2.40.5-1~deb12u1"
    }
  ],
  "distribution_packages": [
    {
      "name": "qtwebkit-opensource-src",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            }
          ]
        }
      ],
      "release": "16.04",
      "versions": [
        "5.4.2+dfsg-1ubuntu2.1",
        "5.5.1+dfsg-2ubuntu1"
      ],
      "ecosystem": "deb",
      "fixed_version": "",
      "provider_record_id": "UBUNTU-CVE-2023-40397"
    },
    {
      "name": "webkit2gtk",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            }
          ]
        }
      ],
      "release": "16.04",
      "versions": [
        "2.8.5+dfsg1-3",
        "2.10.3+dfsg1-1",
        "2.10.4+dfsg1-1",
        "2.10.5-1",
        "2.10.6-1",
        "2.10.6-1ubuntu1",
        "2.10.8-1ubuntu1",
        "2.10.9-1ubuntu1",
        "2.12.5-0ubuntu0.16.04.1",
        "2.14.2-0ubuntu0.16.04.1",
        "2.14.3-0ubuntu0.16.04.1",
        "2.14.5-0ubuntu0.16.04.1",
        "2.16.1-0ubuntu0.16.04.1",
        "2.16.1-0ubuntu0.16.04.2",
        "2.16.2-0ubuntu0.16.04.1",
        "2.16.3-0ubuntu0.16.04.1",
        "2.16.6-0ubuntu0.16.04.1",
        "2.18.0-0ubuntu0.16.04.2",
        "2.18.3-0ubuntu0.16.04.1",
        "2.18.4-0ubuntu0.16.04.1",
        "2.18.5-0ubuntu0.16.04.1",
        "2.18.6-0ubuntu0.16.04.1",
        "2.20.1-0ubuntu0.16.04.1",
        "2.20.2-0ubuntu0.16.04.1",
        "2.20.3-0ubuntu0.16.04.1",
        "2.20.5-0ubuntu0.16.04.1"
      ],
      "ecosystem": "deb",
      "fixed_version": "",
      "provider_record_id": "UBUNTU-CVE-2023-40397"
    },
    {
      "name": "qtwebkit-source",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            }
          ]
        }
      ],
      "release": "16.04",
      "versions": [
        "2.3.2-0ubuntu10",
        "2.3.2-0ubuntu11"
      ],
      "ecosystem": "deb",
      "fixed_version": "",
      "provider_record_id": "UBUNTU-CVE-2023-40397"
    },
    {
      "name": "webkitgtk",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            }
          ]
        }
      ],
      "release": "16.04",
      "versions": [
        "2.4.9-2ubuntu2",
        "2.4.10-0ubuntu1",
        "2.4.11-0ubuntu0.1"
      ],
      "ecosystem": "deb",
      "fixed_version": "",
      "provider_record_id": "UBUNTU-CVE-2023-40397"
    },
    {
      "name": "webkit2gtk",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            }
          ]
        }
      ],
      "release": "18.04",
      "versions": [
        "2.18.0-2",
        "2.18.0-2build1",
        "2.18.2-1",
        "2.18.3-1",
        "2.18.4-1",
        "2.18.6-1",
        "2.19.91-1ubuntu1",
        "2.19.92-1",
        "2.20.0-1",
        "2.20.0-2",
        "2.20.0-2ubuntu1",
        "2.20.1-1",
        "2.20.2-0ubuntu0.18.04.1",
        "2.20.3-0ubuntu0.18.04.1",
        "2.20.5-0ubuntu0.18.04.1",
        "2.22.2-0ubuntu0.18.04.1",
        "2.22.2-0ubuntu0.18.04.2",
        "2.22.4-0ubuntu0.18.04.1",
        "2.22.5-0ubuntu0.18.04.1",
        "2.22.6-0ubuntu0.18.04.1",
        "2.24.1-0ubuntu0.18.04.1",
        "2.24.2-0ubuntu0.18.04.1",
        "2.24.4-0ubuntu0.18.04.1",
        "2.26.1-0ubuntu0.18.04.1",
        "2.26.2-0ubuntu0.18.04.1",
        "2.26.3-0ubuntu0.18.04.1",
        "2.26.4-0ubuntu0.18.04.1",
        "2.28.0-0ubuntu0.18.04.3",
        "2.28.1-0ubuntu0.18.04.1",
        "2.28.2-0ubuntu0.18.04.1",
        "2.28.3-0ubuntu0.18.04.1",
        "2.28.4-0ubuntu0.18.04.1",
        "2.30.3-0ubuntu0.18.04.1",
        "2.30.5-0ubuntu0.18.04.1",
        "2.30.6-0ubuntu0.18.04.1",
        "2.32.0-0ubuntu0.18.04.1",
        "2.32.3-0ubuntu0.18.04.1",
        "2.32.4-0ubuntu0.18.04.1"
      ],
      "ecosystem": "deb",
      "fixed_version": "",
      "provider_record_id": "UBUNTU-CVE-2023-40397"
    },
    {
      "name": "qtwebkit-opensource-src",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            }
          ]
        }
      ],
      "release": "18.04",
      "versions": [
        "5.9.1+dfsg-5ubuntu1",
        "5.9.1+dfsg-5ubuntu3",
        "5.212.0~alpha2-5build2",
        "5.212.0~alpha2-5build4",
        "5.212.0~alpha2-7",
        "5.212.0~alpha2-7build2",
        "5.212.0~alpha2-7ubuntu1"
      ],
      "ecosystem": "deb",
      "fixed_version": "",
      "provider_record_id": "UBUNTU-CVE-2023-40397"
    },
    {
      "name": "qtwebkit-source",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            }
          ]
        }
      ],
      "release": "18.04",
      "versions": [
        "2.3.2-0ubuntu13"
      ],
      "ecosystem": "deb",
      "fixed_version": "",
      "provider_record_id": "UBUNTU-CVE-2023-40397"
    },
    {
      "name": "webkitgtk",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            }
          ]
        }
      ],
      "release": "18.04",
      "versions": [
        "2.4.11-3",
        "2.4.11-3ubuntu2",
        "2.4.11-3ubuntu3"
      ],
      "ecosystem": "deb",
      "fixed_version": "",
      "provider_record_id": "UBUNTU-CVE-2023-40397"
    },
    {
      "name": "webkit2gtk",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            }
          ]
        }
      ],
      "release": "20.04",
      "versions": [
        "2.26.1-3",
        "2.26.2-1",
        "2.26.3-1ubuntu2",
        "2.26.4-1ubuntu1",
        "2.28.0-1ubuntu2",
        "2.28.1-1",
        "2.28.2-0ubuntu0.20.04.1",
        "2.28.3-0ubuntu0.20.04.1",
        "2.28.4-0ubuntu0.20.04.1",
        "2.30.3-0ubuntu0.20.04.1",
        "2.30.5-0ubuntu0.20.04.1",
        "2.30.6-0ubuntu0.20.04.1",
        "2.32.0-0ubuntu0.20.04.1",
        "2.32.3-0ubuntu0.20.04.1",
        "2.32.4-0ubuntu0.20.04.1",
        "2.34.1-0ubuntu0.20.04.1",
        "2.34.3-0ubuntu0.20.04.1",
        "2.34.4-0ubuntu0.20.04.1",
        "2.34.6-0ubuntu0.20.04.1",
        "2.36.0-0ubuntu0.20.04.3",
        "2.36.2-0ubuntu0.20.04.1",
        "2.36.3-0ubuntu0.20.04.1",
        "2.36.4-0ubuntu0.20.04.1",
        "2.36.6-0ubuntu0.20.04.1",
        "2.36.7-0ubuntu0.20.04.1",
        "2.36.8-0ubuntu0.20.04.1",
        "2.38.2-0ubuntu0.20.04.1",
        "2.38.3-0ubuntu0.20.04.1",
        "2.38.4-0ubuntu0.20.04.2",
        "2.38.5-0ubuntu0.20.04.1",
        "2.38.6-0ubuntu0.20.04.1"
      ],
      "ecosystem": "deb",
      "fixed_version": "",
      "provider_record_id": "UBUNTU-CVE-2023-40397"
    },
    {
      "name": "qtwebkit-opensource-src",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            }
          ]
        }
      ],
      "release": "20.04",
      "versions": [
        "5.212.0~alpha3-3",
        "5.212.0~alpha3-5",
        "5.212.0~alpha3-6",
        "5.212.0~alpha3-7",
        "5.212.0~alpha4-1",
        "5.212.0~alpha4-1ubuntu1",
        "5.212.0~alpha4-1ubuntu2",
        "5.212.0~alpha4-1ubuntu2.1"
      ],
      "ecosystem": "deb",
      "fixed_version": "",
      "provider_record_id": "UBUNTU-CVE-2023-40397"
    },
    {
      "name": "wpewebkit",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            }
          ]
        }
      ],
      "release": "20.04",
      "versions": [
        "2.26.3-1",
        "2.26.4-1",
        "2.26.4-1build1",
        "2.28.0-1",
        "2.28.1-1"
      ],
      "ecosystem": "deb",
      "fixed_version": "",
      "provider_record_id": "UBUNTU-CVE-2023-40397"
    },
    {
      "name": "qtwebkit-opensource-src",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            }
          ]
        }
      ],
      "release": "22.04",
      "versions": [
        "5.212.0~alpha4-12",
        "5.212.0~alpha4-13",
        "5.212.0~alpha4-14",
        "5.212.0~alpha4-14build1",
        "5.212.0~alpha4-14ubuntu2",
        "5.212.0~alpha4-15ubuntu1"
      ],
      "ecosystem": "deb",
      "fixed_version": "",
      "provider_record_id": "UBUNTU-CVE-2023-40397"
    },
    {
      "name": "webkit2gtk",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.40.5-0ubuntu0.22.04.1"
            }
          ]
        }
      ],
      "release": "22.04",
      "versions": [
        "2.34.0-1ubuntu1",
        "2.34.1-1ubuntu1",
        "2.34.2-1ubuntu1",
        "2.34.3-1",
        "2.35.3-1ubuntu1",
        "2.35.90-1ubuntu1",
        "2.36.0-2ubuntu1",
        "2.36.2-0ubuntu0.22.04.1",
        "2.36.3-0ubuntu0.22.04.1",
        "2.36.4-0ubuntu0.22.04.1",
        "2.36.6-0ubuntu0.22.04.1",
        "2.36.7-0ubuntu0.22.04.1",
        "2.36.8-0ubuntu0.22.04.1",
        "2.38.2-0ubuntu0.22.04.2",
        "2.38.3-0ubuntu0.22.04.1",
        "2.38.4-0ubuntu0.22.04.1",
        "2.38.5-0ubuntu0.22.04.1",
        "2.38.6-0ubuntu0.22.04.1",
        "2.40.4-0ubuntu0.22.04.1"
      ],
      "ecosystem": "deb",
      "fixed_version": "2.40.5-0ubuntu0.22.04.1",
      "provider_record_id": "UBUNTU-CVE-2023-40397"
    },
    {
      "name": "wpewebkit",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            }
          ]
        }
      ],
      "release": "22.04",
      "versions": [
        "2.32.4-1",
        "2.34.1-1",
        "2.34.2-1",
        "2.34.3-1",
        "2.34.4-1",
        "2.34.5-1",
        "2.34.6-1",
        "2.36.0-2ubuntu2",
        "2.36.0-2ubuntu3"
      ],
      "ecosystem": "deb",
      "fixed_version": "",
      "provider_record_id": "UBUNTU-CVE-2023-40397"
    },
    {
      "name": "qtwebkit-opensource-src",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            }
          ]
        }
      ],
      "release": "24.04",
      "versions": [
        "5.212.0~alpha4-33",
        "5.212.0~alpha4-33build1",
        "5.212.0~alpha4-34",
        "5.212.0~alpha4-34ubuntu3",
        "5.212.0~alpha4-34ubuntu4",
        "5.212.0~alpha4-36"
      ],
      "ecosystem": "deb",
      "fixed_version": "",
      "provider_record_id": "UBUNTU-CVE-2023-40397"
    }
  ]
}

Publisher notes

[bookworm] wpewebkit: wpewebkit not covered by security support in Bookworm

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

[Debian 12 (Bookworm)]

[gir1.2-javascriptcoregtk-4.0]Unknown
Source package: [webkit2gtk]
Details (6)
- 2.50.6-1~deb12u2 · amd64 · bookworm
  Fixed · Fixed: 2.40.5-1~deb12u1
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.50.6-1~deb12u2 · arm64 · bookworm
  Fixed · Fixed: 2.40.5-1~deb12u1
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.46.1-2~bpo12+1 · amd64 · bookworm-backports
  Fixed · Fixed: 2.40.5-1~deb12u1
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.46.1-2~bpo12+1 · arm64 · bookworm-backports
  Fixed · Fixed: 2.40.5-1~deb12u1
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.50.6-1~deb12u1 · amd64 · bookworm-security
  Fixed · Fixed: 2.40.5-1~deb12u1
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.50.6-1~deb12u1 · arm64 · bookworm-security
  Fixed · Fixed: 2.40.5-1~deb12u1
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
[gir1.2-javascriptcoregtk-4.1]Unknown
Source package: [webkit2gtk]
Details (6)
- 2.50.6-1~deb12u2 · amd64 · bookworm
  Fixed · Fixed: 2.40.5-1~deb12u1
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.50.6-1~deb12u2 · arm64 · bookworm
  Fixed · Fixed: 2.40.5-1~deb12u1
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.46.1-2~bpo12+1 · amd64 · bookworm-backports
  Fixed · Fixed: 2.40.5-1~deb12u1
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.46.1-2~bpo12+1 · arm64 · bookworm-backports
  Fixed · Fixed: 2.40.5-1~deb12u1
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.50.6-1~deb12u1 · amd64 · bookworm-security
  Fixed · Fixed: 2.40.5-1~deb12u1
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.50.6-1~deb12u1 · arm64 · bookworm-security
  Fixed · Fixed: 2.40.5-1~deb12u1
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
[gir1.2-javascriptcoregtk-6.0]Unknown
Source package: [webkit2gtk]
Details (6)
- 2.50.6-1~deb12u2 · amd64 · bookworm
  Fixed · Fixed: 2.40.5-1~deb12u1
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.50.6-1~deb12u2 · arm64 · bookworm
  Fixed · Fixed: 2.40.5-1~deb12u1
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.46.1-2~bpo12+1 · amd64 · bookworm-backports
  Fixed · Fixed: 2.40.5-1~deb12u1
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.46.1-2~bpo12+1 · arm64 · bookworm-backports
  Fixed · Fixed: 2.40.5-1~deb12u1
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.50.6-1~deb12u1 · amd64 · bookworm-security
  Fixed · Fixed: 2.40.5-1~deb12u1
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.50.6-1~deb12u1 · arm64 · bookworm-security
  Fixed · Fixed: 2.40.5-1~deb12u1
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
[gir1.2-webkit2-4.0]Unknown
Source package: [webkit2gtk]
Details (6)
- 2.50.6-1~deb12u2 · amd64 · bookworm
  Fixed · Fixed: 2.40.5-1~deb12u1
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.50.6-1~deb12u2 · arm64 · bookworm
  Fixed · Fixed: 2.40.5-1~deb12u1
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.46.1-2~bpo12+1 · amd64 · bookworm-backports
  Fixed · Fixed: 2.40.5-1~deb12u1
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.46.1-2~bpo12+1 · arm64 · bookworm-backports
  Fixed · Fixed: 2.40.5-1~deb12u1
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.50.6-1~deb12u1 · amd64 · bookworm-security
  Fixed · Fixed: 2.40.5-1~deb12u1
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.50.6-1~deb12u1 · arm64 · bookworm-security
  Fixed · Fixed: 2.40.5-1~deb12u1
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
[gir1.2-webkit2-4.1]Unknown
Source package: [webkit2gtk]
Details (6)
- 2.50.6-1~deb12u2 · amd64 · bookworm
  Fixed · Fixed: 2.40.5-1~deb12u1
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.50.6-1~deb12u2 · arm64 · bookworm
  Fixed · Fixed: 2.40.5-1~deb12u1
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.46.1-2~bpo12+1 · amd64 · bookworm-backports
  Fixed · Fixed: 2.40.5-1~deb12u1
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.46.1-2~bpo12+1 · arm64 · bookworm-backports
  Fixed · Fixed: 2.40.5-1~deb12u1
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.50.6-1~deb12u1 · amd64 · bookworm-security
  Fixed · Fixed: 2.40.5-1~deb12u1
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.50.6-1~deb12u1 · arm64 · bookworm-security
  Fixed · Fixed: 2.40.5-1~deb12u1
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
[gir1.2-webkit-6.0]Unknown
Source package: [webkit2gtk]
Details (6)
- 2.50.6-1~deb12u2 · amd64 · bookworm
  Fixed · Fixed: 2.40.5-1~deb12u1
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.50.6-1~deb12u2 · arm64 · bookworm
  Fixed · Fixed: 2.40.5-1~deb12u1
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.46.1-2~bpo12+1 · amd64 · bookworm-backports
  Fixed · Fixed: 2.40.5-1~deb12u1
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.46.1-2~bpo12+1 · arm64 · bookworm-backports
  Fixed · Fixed: 2.40.5-1~deb12u1
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.50.6-1~deb12u1 · amd64 · bookworm-security
  Fixed · Fixed: 2.40.5-1~deb12u1
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.50.6-1~deb12u1 · arm64 · bookworm-security
  Fixed · Fixed: 2.40.5-1~deb12u1
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
[libjavascriptcoregtk-4.0-18]Unknown
Source package: [webkit2gtk]
Details (6)
- 2.50.6-1~deb12u2 · amd64 · bookworm
  Fixed · Fixed: 2.40.5-1~deb12u1
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.50.6-1~deb12u2 · arm64 · bookworm
  Fixed · Fixed: 2.40.5-1~deb12u1
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.46.1-2~bpo12+1 · amd64 · bookworm-backports
  Fixed · Fixed: 2.40.5-1~deb12u1
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.46.1-2~bpo12+1 · arm64 · bookworm-backports
  Fixed · Fixed: 2.40.5-1~deb12u1
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.50.6-1~deb12u1 · amd64 · bookworm-security
  Fixed · Fixed: 2.40.5-1~deb12u1
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.50.6-1~deb12u1 · arm64 · bookworm-security
  Fixed · Fixed: 2.40.5-1~deb12u1
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
[libjavascriptcoregtk-4.0-bin]Unknown
Source package: [webkit2gtk]
Details (6)
- 2.50.6-1~deb12u2 · amd64 · bookworm
  Fixed · Fixed: 2.40.5-1~deb12u1
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.50.6-1~deb12u2 · arm64 · bookworm
  Fixed · Fixed: 2.40.5-1~deb12u1
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.46.1-2~bpo12+1 · amd64 · bookworm-backports
  Fixed · Fixed: 2.40.5-1~deb12u1
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.46.1-2~bpo12+1 · arm64 · bookworm-backports
  Fixed · Fixed: 2.40.5-1~deb12u1
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.50.6-1~deb12u1 · amd64 · bookworm-security
  Fixed · Fixed: 2.40.5-1~deb12u1
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.50.6-1~deb12u1 · arm64 · bookworm-security
  Fixed · Fixed: 2.40.5-1~deb12u1
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
[libjavascriptcoregtk-4.0-dev]Unknown
Source package: [webkit2gtk]
Details (6)
- 2.50.6-1~deb12u2 · amd64 · bookworm
  Fixed · Fixed: 2.40.5-1~deb12u1
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.50.6-1~deb12u2 · arm64 · bookworm
  Fixed · Fixed: 2.40.5-1~deb12u1
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.46.1-2~bpo12+1 · amd64 · bookworm-backports
  Fixed · Fixed: 2.40.5-1~deb12u1
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.46.1-2~bpo12+1 · arm64 · bookworm-backports
  Fixed · Fixed: 2.40.5-1~deb12u1
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.50.6-1~deb12u1 · amd64 · bookworm-security
  Fixed · Fixed: 2.40.5-1~deb12u1
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.50.6-1~deb12u1 · arm64 · bookworm-security
  Fixed · Fixed: 2.40.5-1~deb12u1
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
[libjavascriptcoregtk-4.1-0]Unknown
Source package: [webkit2gtk]
Details (6)
- 2.50.6-1~deb12u2 · amd64 · bookworm
  Fixed · Fixed: 2.40.5-1~deb12u1
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.50.6-1~deb12u2 · arm64 · bookworm
  Fixed · Fixed: 2.40.5-1~deb12u1
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.46.1-2~bpo12+1 · amd64 · bookworm-backports
  Fixed · Fixed: 2.40.5-1~deb12u1
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.46.1-2~bpo12+1 · arm64 · bookworm-backports
  Fixed · Fixed: 2.40.5-1~deb12u1
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.50.6-1~deb12u1 · amd64 · bookworm-security
  Fixed · Fixed: 2.40.5-1~deb12u1
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.50.6-1~deb12u1 · arm64 · bookworm-security
  Fixed · Fixed: 2.40.5-1~deb12u1
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
[libjavascriptcoregtk-4.1-dev]Unknown
Source package: [webkit2gtk]
Details (6)
- 2.50.6-1~deb12u2 · amd64 · bookworm
  Fixed · Fixed: 2.40.5-1~deb12u1
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.50.6-1~deb12u2 · arm64 · bookworm
  Fixed · Fixed: 2.40.5-1~deb12u1
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.46.1-2~bpo12+1 · amd64 · bookworm-backports
  Fixed · Fixed: 2.40.5-1~deb12u1
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.46.1-2~bpo12+1 · arm64 · bookworm-backports
  Fixed · Fixed: 2.40.5-1~deb12u1
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.50.6-1~deb12u1 · amd64 · bookworm-security
  Fixed · Fixed: 2.40.5-1~deb12u1
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.50.6-1~deb12u1 · arm64 · bookworm-security
  Fixed · Fixed: 2.40.5-1~deb12u1
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
[libjavascriptcoregtk-6.0-1]Unknown
Source package: [webkit2gtk]
Details (6)
- 2.50.6-1~deb12u2 · amd64 · bookworm
  Fixed · Fixed: 2.40.5-1~deb12u1
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.50.6-1~deb12u2 · arm64 · bookworm
  Fixed · Fixed: 2.40.5-1~deb12u1
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.46.1-2~bpo12+1 · amd64 · bookworm-backports
  Fixed · Fixed: 2.40.5-1~deb12u1
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.46.1-2~bpo12+1 · arm64 · bookworm-backports
  Fixed · Fixed: 2.40.5-1~deb12u1
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.50.6-1~deb12u1 · amd64 · bookworm-security
  Fixed · Fixed: 2.40.5-1~deb12u1
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.50.6-1~deb12u1 · arm64 · bookworm-security
  Fixed · Fixed: 2.40.5-1~deb12u1
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
[libjavascriptcoregtk-6.0-dev]Unknown
Source package: [webkit2gtk]
Details (6)
- 2.50.6-1~deb12u2 · amd64 · bookworm
  Fixed · Fixed: 2.40.5-1~deb12u1
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.50.6-1~deb12u2 · arm64 · bookworm
  Fixed · Fixed: 2.40.5-1~deb12u1
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.46.1-2~bpo12+1 · amd64 · bookworm-backports
  Fixed · Fixed: 2.40.5-1~deb12u1
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.46.1-2~bpo12+1 · arm64 · bookworm-backports
  Fixed · Fixed: 2.40.5-1~deb12u1
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.50.6-1~deb12u1 · amd64 · bookworm-security
  Fixed · Fixed: 2.40.5-1~deb12u1
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.50.6-1~deb12u1 · arm64 · bookworm-security
  Fixed · Fixed: 2.40.5-1~deb12u1
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
[libwebkit2gtk-4.0-37]Unknown
Source package: [webkit2gtk]
Details (6)
- 2.50.6-1~deb12u2 · amd64 · bookworm
  Fixed · Fixed: 2.40.5-1~deb12u1
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.50.6-1~deb12u2 · arm64 · bookworm
  Fixed · Fixed: 2.40.5-1~deb12u1
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.46.1-2~bpo12+1 · amd64 · bookworm-backports
  Fixed · Fixed: 2.40.5-1~deb12u1
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.46.1-2~bpo12+1 · arm64 · bookworm-backports
  Fixed · Fixed: 2.40.5-1~deb12u1
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.50.6-1~deb12u1 · amd64 · bookworm-security
  Fixed · Fixed: 2.40.5-1~deb12u1
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.50.6-1~deb12u1 · arm64 · bookworm-security
  Fixed · Fixed: 2.40.5-1~deb12u1
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
[libwebkit2gtk-4.0-dev]Unknown
Source package: [webkit2gtk]
Details (6)
- 2.50.6-1~deb12u2 · amd64 · bookworm
  Fixed · Fixed: 2.40.5-1~deb12u1
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.50.6-1~deb12u2 · arm64 · bookworm
  Fixed · Fixed: 2.40.5-1~deb12u1
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.46.1-2~bpo12+1 · amd64 · bookworm-backports
  Fixed · Fixed: 2.40.5-1~deb12u1
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.46.1-2~bpo12+1 · arm64 · bookworm-backports
  Fixed · Fixed: 2.40.5-1~deb12u1
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.50.6-1~deb12u1 · amd64 · bookworm-security
  Fixed · Fixed: 2.40.5-1~deb12u1
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.50.6-1~deb12u1 · arm64 · bookworm-security
  Fixed · Fixed: 2.40.5-1~deb12u1
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
[libwebkit2gtk-4.0-doc]Unknown
Source package: [webkit2gtk]
Details (6)
- 2.50.6-1~deb12u2 · all · bookworm
  Fixed · Fixed: 2.40.5-1~deb12u1
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.50.6-1~deb12u2 · all · bookworm
  Fixed · Fixed: 2.40.5-1~deb12u1
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.46.1-2~bpo12+1 · all · bookworm-backports
  Fixed · Fixed: 2.40.5-1~deb12u1
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.46.1-2~bpo12+1 · all · bookworm-backports
  Fixed · Fixed: 2.40.5-1~deb12u1
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.50.6-1~deb12u1 · all · bookworm-security
  Fixed · Fixed: 2.40.5-1~deb12u1
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.50.6-1~deb12u1 · all · bookworm-security
  Fixed · Fixed: 2.40.5-1~deb12u1
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
[libwebkit2gtk-4.1-0]Unknown
Source package: [webkit2gtk]
Details (6)
- 2.50.6-1~deb12u2 · amd64 · bookworm
  Fixed · Fixed: 2.40.5-1~deb12u1
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.50.6-1~deb12u2 · arm64 · bookworm
  Fixed · Fixed: 2.40.5-1~deb12u1
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.46.1-2~bpo12+1 · amd64 · bookworm-backports
  Fixed · Fixed: 2.40.5-1~deb12u1
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.46.1-2~bpo12+1 · arm64 · bookworm-backports
  Fixed · Fixed: 2.40.5-1~deb12u1
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.50.6-1~deb12u1 · amd64 · bookworm-security
  Fixed · Fixed: 2.40.5-1~deb12u1
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.50.6-1~deb12u1 · arm64 · bookworm-security
  Fixed · Fixed: 2.40.5-1~deb12u1
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
[libwebkit2gtk-4.1-dev]Unknown
Source package: [webkit2gtk]
Details (6)
- 2.50.6-1~deb12u2 · amd64 · bookworm
  Fixed · Fixed: 2.40.5-1~deb12u1
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.50.6-1~deb12u2 · arm64 · bookworm
  Fixed · Fixed: 2.40.5-1~deb12u1
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.46.1-2~bpo12+1 · amd64 · bookworm-backports
  Fixed · Fixed: 2.40.5-1~deb12u1
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.46.1-2~bpo12+1 · arm64 · bookworm-backports
  Fixed · Fixed: 2.40.5-1~deb12u1
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.50.6-1~deb12u1 · amd64 · bookworm-security
  Fixed · Fixed: 2.40.5-1~deb12u1
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.50.6-1~deb12u1 · arm64 · bookworm-security
  Fixed · Fixed: 2.40.5-1~deb12u1
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
[libwebkitgtk-6.0-4]Unknown
Source package: [webkit2gtk]
Details (6)
- 2.50.6-1~deb12u2 · amd64 · bookworm
  Fixed · Fixed: 2.40.5-1~deb12u1
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.50.6-1~deb12u2 · arm64 · bookworm
  Fixed · Fixed: 2.40.5-1~deb12u1
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.46.1-2~bpo12+1 · amd64 · bookworm-backports
  Fixed · Fixed: 2.40.5-1~deb12u1
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.46.1-2~bpo12+1 · arm64 · bookworm-backports
  Fixed · Fixed: 2.40.5-1~deb12u1
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.50.6-1~deb12u1 · amd64 · bookworm-security
  Fixed · Fixed: 2.40.5-1~deb12u1
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.50.6-1~deb12u1 · arm64 · bookworm-security
  Fixed · Fixed: 2.40.5-1~deb12u1
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
[libwebkitgtk-6.0-dev]Unknown
Source package: [webkit2gtk]
Details (6)
- 2.50.6-1~deb12u2 · amd64 · bookworm
  Fixed · Fixed: 2.40.5-1~deb12u1
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.50.6-1~deb12u2 · arm64 · bookworm
  Fixed · Fixed: 2.40.5-1~deb12u1
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.46.1-2~bpo12+1 · amd64 · bookworm-backports
  Fixed · Fixed: 2.40.5-1~deb12u1
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.46.1-2~bpo12+1 · arm64 · bookworm-backports
  Fixed · Fixed: 2.40.5-1~deb12u1
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.50.6-1~deb12u1 · amd64 · bookworm-security
  Fixed · Fixed: 2.40.5-1~deb12u1
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.50.6-1~deb12u1 · arm64 · bookworm-security
  Fixed · Fixed: 2.40.5-1~deb12u1
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12

Next results

Observed: Oct 28, 2026, 5:44:45 PM UTC

References

[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]