{
  "cveId": "CVE-2023-43000",
  "url": "https://patchblox.com/security/cve/CVE-2023-43000",
  "summary": "CVE-2023-43000 is fixed in 22 products on 1 platform, first by RHSA-2024:2126, released April 30, 2024. It is being exploited: CISA added it to the Known Exploited Vulnerabilities catalog on March 5, 2026. Patch Radar priority: Patch now.",
  "title": "webkit2gtk3: This update for webkit2gtk3 fixes the following issues:\n\nUpdate to version 2.50.4.\n\nSecurity issues fixed:\n\n- CVE-202...",
  "description": "This update for webkit2gtk3 fixes the following issues:\n\nUpdate to version 2.50.4.\n\nSecurity issues fixed:\n\n- CVE-2025-13502: processing of maliciously crafted payloads by the GLib remote inspector server may lead to a\n  UIProcess crash due to an out-of-bounds read and an integer underflow (bsc#1254208).\n- CVE-2025-13947: use of the file drag-and-drop mechanism may lead to remote information disclosure due to a lack of\n  verification of the origins of drag operations (bsc#1254473).\n- CVE-2025-14174: processing maliciously crafted web content may lead to memory corruption due to improper validation\n  (bsc#1255497).\n- CVE-2025-43392: websites may exfiltrate image data cross-origin due to issues with cache handling (bsc#1254165).\n- CVE-2025-43421: processing maliciously crafted web content may lead to an unexpected process crash due to enabled\n  array allocation sinking (bsc#1254167).\n- CVE-2025-43425: processing maliciously crafted web content may lead to an unexpected process crash due to improper\n  memory handling (bsc#1254168).\n- CVE-2025-43427: processing maliciously crafted web content may lead to an unexpected process crash due to issues with\n  state management (bsc#1254169).\n- CVE-2025-43429: processing maliciously crafted web content may lead to an unexpected process crash due to a buffer\n  overflow issue (bsc#1254174).\n- CVE-2025-43430: processing maliciously crafted web content may lead to an unexpected process crash due to issues with\n  state management (bsc#1254172).\n- CVE-2025-43431: processing maliciously crafted web content may lead to memory corruption due to improper memory\n  handling (bsc#1254170).\n- CVE-2025-43432: processing maliciously crafted web content may lead to an unexpected process crash due to a\n  use-after-free issue (bsc#1254171).\n- CVE-2025-43434: processing maliciously crafted web content may lead to an unexpected process crash due to a\n  use-after-free issue (bsc#1254179).\n- CVE-2025-43440: processing maliciously crafted web content may lead to an unexpected process crash due to missing\n  checks (bsc#1254177). \n- CVE-2025-43443: processing maliciously crafted web content may lead to an unexpected process crash due to missing\n  checks (bsc#1254176).\n- CVE-2025-43458: processing maliciously crafted web content may lead to an unexpected process crash due to issues with\n  state management (bsc#1254498).\n- CVE-2025-43501: processing maliciously crafted web content may lead to an unexpected process crash due to a buffer\n  overflow issue (bsc#1255194).\n- CVE-2025-43529: processing maliciously crafted web content may lead to arbitrary code execution due to a\n  use-after-free issue (bsc#1255198).\n- CVE-2025-43531: processing maliciously crafted web content may lead to an unexpected process crash due to a race\n  condition (bsc#1255183).\n- CVE-2025-43535: processing maliciously crafted web content may lead to an unexpected process crash due to improper\n  memory handling (bsc#1255195).\n- CVE-2025-43536: processing maliciously crafted web content may lead to an unexpected process crash due to a\n  use-after-free issue (bsc#1255200).\n- CVE-2025-43541: processing maliciously crafted web content may lead to an unexpected process crash due to type\n  confusion (bsc#1255191).\n- CVE-2025-66287: processing maliciously crafted web content may lead to an unexpected process crash due to improper\n  memory handling (bsc#1254509).\n\nOther issues fixed and changes:\n\n- Version 2.50.4:\n  * Correctly handle the program name passed to the sleep disabler.\n  * Ensure GStreamer is initialized before using the Quirks.\n  * Fix several crashes and rendering issues.\n    \n- Version 2.50.3:  \n  * Fix seeking and looping of media elements that set the \u0027loop\u0027 property.\n  * Fix several crashes and rendering issues.\n    \n- Version 2.50.2:\n  * Prevent unsafe URI schemes from participating in media playback.\n  * Make jsc_value_array_buffer_get_data() function introspectable.\n  * Fix logging in to Google accounts that have a WebAuthn second factor configured.\n  * Fix loading webkit://gpu when there are no threads configured for GPU rendering.\n  * Fix rendering gradiants that use the CSS hue interpolation method.\n  * Fix pasting image data from the clipboard.\n  * Fix font-family selection when the font name contains spaces.\n  * Fix the build with standard C libraries that lack execinfo.h, like Musl or uClibc.\n  * Fix capturing canvas snapshots in the Web Inspector.\n  * Fix several crashes and rendering issues.\n    \n- Fix a11y regression where AT-SPI roles were mapped incorrectly.",
  "published": "2024-04-30T00:00:00Z",
  "severity": "high",
  "cvss": 8.8,
  "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
  "epss": 0.04042,
  "epssPercentile": 0.90689,
  "priority": "Patch now",
  "priorityTier": 1,
  "exploited": true,
  "vendorExploited": false,
  "disclosed": false,
  "kev": {
    "added": "2026-03-05T00:00:00Z",
    "due": "2026-03-26T00:00:00Z",
    "ransomware": false,
    "requiredAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable."
  },
  "fixes": [
    {
      "platform": "linux",
      "product": "gir1.2-javascriptcoregtk-4.0",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "2.42.1-0ubuntu0.22.04.1",
      "fix": "gir1.2-javascriptcoregtk-4.0 2.42.1-0ubuntu0.22.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-gir1.2-javascriptcoregtk-4.0-2.42.1-0ubuntu0.22.04.1",
      "released": "2025-11-05T11:15:00Z"
    },
    {
      "platform": "linux",
      "product": "gir1.2-javascriptcoregtk-4.1",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "2.42.1-0ubuntu0.22.04.1",
      "fix": "gir1.2-javascriptcoregtk-4.1 2.42.1-0ubuntu0.22.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-gir1.2-javascriptcoregtk-4.1-2.42.1-0ubuntu0.22.04.1",
      "released": "2025-11-05T11:15:00Z"
    },
    {
      "platform": "linux",
      "product": "gir1.2-javascriptcoregtk-6.0",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "2.42.1-0ubuntu0.22.04.1",
      "fix": "gir1.2-javascriptcoregtk-6.0 2.42.1-0ubuntu0.22.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-gir1.2-javascriptcoregtk-6.0-2.42.1-0ubuntu0.22.04.1",
      "released": "2025-11-05T11:15:00Z"
    },
    {
      "platform": "linux",
      "product": "gir1.2-webkit-6.0",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "2.42.1-0ubuntu0.22.04.1",
      "fix": "gir1.2-webkit-6.0 2.42.1-0ubuntu0.22.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-gir1.2-webkit-6.0-2.42.1-0ubuntu0.22.04.1",
      "released": "2025-11-05T11:15:00Z"
    },
    {
      "platform": "linux",
      "product": "gir1.2-webkit2-4.0",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "2.42.1-0ubuntu0.22.04.1",
      "fix": "gir1.2-webkit2-4.0 2.42.1-0ubuntu0.22.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-gir1.2-webkit2-4.0-2.42.1-0ubuntu0.22.04.1",
      "released": "2025-11-05T11:15:00Z"
    },
    {
      "platform": "linux",
      "product": "gir1.2-webkit2-4.1",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "2.42.1-0ubuntu0.22.04.1",
      "fix": "gir1.2-webkit2-4.1 2.42.1-0ubuntu0.22.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-gir1.2-webkit2-4.1-2.42.1-0ubuntu0.22.04.1",
      "released": "2025-11-05T11:15:00Z"
    },
    {
      "platform": "linux",
      "product": "libjavascriptcoregtk-4.0-18",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "2.42.1-0ubuntu0.22.04.1",
      "fix": "libjavascriptcoregtk-4.0-18 2.42.1-0ubuntu0.22.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-libjavascriptcoregtk-4.0-18-2.42.1-0ubuntu0.22.04.1",
      "released": "2025-11-05T11:15:00Z"
    },
    {
      "platform": "linux",
      "product": "libjavascriptcoregtk-4.0-bin",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "2.42.1-0ubuntu0.22.04.1",
      "fix": "libjavascriptcoregtk-4.0-bin 2.42.1-0ubuntu0.22.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-libjavascriptcoregtk-4.0-bin-2.42.1-0ubuntu0.22.04.1",
      "released": "2025-11-05T11:15:00Z"
    },
    {
      "platform": "linux",
      "product": "libjavascriptcoregtk-4.1-0",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "2.42.1-0ubuntu0.22.04.1",
      "fix": "libjavascriptcoregtk-4.1-0 2.42.1-0ubuntu0.22.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-libjavascriptcoregtk-4.1-0-2.42.1-0ubuntu0.22.04.1",
      "released": "2025-11-05T11:15:00Z"
    },
    {
      "platform": "linux",
      "product": "libjavascriptcoregtk-6.0-1",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "2.42.1-0ubuntu0.22.04.1",
      "fix": "libjavascriptcoregtk-6.0-1 2.42.1-0ubuntu0.22.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-libjavascriptcoregtk-6.0-1-2.42.1-0ubuntu0.22.04.1",
      "released": "2025-11-05T11:15:00Z"
    },
    {
      "platform": "linux",
      "product": "libwebkit2gtk-4.0-37",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "2.42.1-0ubuntu0.22.04.1",
      "fix": "libwebkit2gtk-4.0-37 2.42.1-0ubuntu0.22.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-libwebkit2gtk-4.0-37-2.42.1-0ubuntu0.22.04.1",
      "released": "2025-11-05T11:15:00Z"
    },
    {
      "platform": "linux",
      "product": "libwebkit2gtk-4.1-0",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "2.42.1-0ubuntu0.22.04.1",
      "fix": "libwebkit2gtk-4.1-0 2.42.1-0ubuntu0.22.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-libwebkit2gtk-4.1-0-2.42.1-0ubuntu0.22.04.1",
      "released": "2025-11-05T11:15:00Z"
    },
    {
      "platform": "linux",
      "product": "libwebkitgtk-6.0-4",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "2.42.1-0ubuntu0.22.04.1",
      "fix": "libwebkitgtk-6.0-4 2.42.1-0ubuntu0.22.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-libwebkitgtk-6.0-4-2.42.1-0ubuntu0.22.04.1",
      "released": "2025-11-05T11:15:00Z"
    },
    {
      "platform": "linux",
      "product": "webkit2gtk",
      "release": "Debian 12.15 (bookworm)",
      "fixedVersion": "2.42.1-1~deb12u1",
      "fix": "DEBIAN-CVE-2023-43000",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2023-43000",
      "released": "2025-11-05T19:15:47Z"
    },
    {
      "platform": "linux",
      "product": "webkit2gtk",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "2.42.0-1",
      "fix": "DEBIAN-CVE-2023-43000",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2023-43000",
      "released": "2025-11-05T19:15:47Z"
    },
    {
      "platform": "linux",
      "product": "webkit2gtk",
      "release": "Debian 14",
      "fixedVersion": "2.42.0-1",
      "fix": "DEBIAN-CVE-2023-43000",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2023-43000",
      "released": "2025-11-05T19:15:47Z"
    },
    {
      "platform": "linux",
      "product": "webkit2gtk-driver",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "2.42.1-0ubuntu0.22.04.1",
      "fix": "webkit2gtk-driver 2.42.1-0ubuntu0.22.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-webkit2gtk-driver-2.42.1-0ubuntu0.22.04.1",
      "released": "2025-11-05T11:15:00Z"
    },
    {
      "platform": "linux",
      "product": "webkit2gtk3",
      "release": "RHEL 8",
      "fixedVersion": "0:2.42.5-1.el8",
      "fix": "RHSA-2024:2982",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2024-2982",
      "released": "2024-05-22T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "webkit2gtk3",
      "release": "RHEL 9",
      "fixedVersion": "0:2.42.5-1.el9",
      "fix": "RHSA-2024:2126",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2024-2126",
      "released": "2024-04-30T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "webkit2gtk3",
      "release": "almalinux 8",
      "fixedVersion": "2.50.3-1.el8_10",
      "fix": "ALSA-2025:22789",
      "url": "https://patchblox.com/security/fix/linux/alsa-2025-22789",
      "released": "2025-12-08T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "webkit2gtk3",
      "release": "almalinux 9",
      "fixedVersion": "2.50.3-1.el9_7",
      "fix": "ALSA-2025:22790",
      "url": "https://patchblox.com/security/fix/linux/alsa-2025-22790",
      "released": "2025-12-08T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "webkit2gtk3",
      "release": "ol 8",
      "fixedVersion": "0:2.50.3-1.el8_10",
      "fix": "ELSA-2025-22789",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-22789",
      "released": "2025-12-08T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "webkit2gtk3",
      "release": "ol 9",
      "fixedVersion": "0:2.50.3-1.el9_7",
      "fix": "ELSA-2025-22790",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-22790",
      "released": "2025-12-08T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "webkit2gtk3",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "2.50.4-150600.12.54.1",
      "fix": "SUSE-SU-2026:0021-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-0021-1",
      "released": "2026-01-05T11:12:33Z"
    },
    {
      "platform": "linux",
      "product": "webkit2gtk3",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "2.50.4-160000.1.1",
      "fix": "OPENSUSE-SU-2026:20065-1",
      "url": "https://patchblox.com/security/fix/linux/opensuse-su-2026-20065-1",
      "released": "2026-01-20T12:08:51Z"
    },
    {
      "platform": "linux",
      "product": "webkit2gtk3",
      "release": "rocky 8",
      "fixedVersion": "0:2.50.3-1.el8_10",
      "fix": "RLSA-2025:22789",
      "url": "https://patchblox.com/security/fix/linux/rlsa-2025-22789",
      "released": "2025-12-09T09:02:00Z"
    },
    {
      "platform": "linux",
      "product": "webkit2gtk3",
      "release": "rocky 9",
      "fixedVersion": "0:2.50.3-1.el9_7",
      "fix": "RLSA-2025:22790",
      "url": "https://patchblox.com/security/fix/linux/rlsa-2025-22790",
      "released": "2025-12-09T09:03:58Z"
    },
    {
      "platform": "linux",
      "product": "webkit2gtk3",
      "release": "sles 15.6",
      "fixedVersion": "2.50.4-150600.12.54.1",
      "fix": "SUSE-SU-2026:0021-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-0021-1",
      "released": "2026-01-05T11:12:33Z"
    },
    {
      "platform": "linux",
      "product": "webkit2gtk3",
      "release": "sles 15.7",
      "fixedVersion": "2.50.4-150600.12.54.1",
      "fix": "SUSE-SU-2026:0021-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-0021-1",
      "released": "2026-01-05T11:12:33Z"
    },
    {
      "platform": "linux",
      "product": "webkit2gtk3",
      "release": "sles 16.0",
      "fixedVersion": "2.50.4-160000.1.1",
      "fix": "SUSE-SU-2026:20102-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-20102-1",
      "released": "2026-01-20T12:37:33Z"
    },
    {
      "platform": "linux",
      "product": "webkit2gtk3-devel",
      "release": "RHEL 8",
      "fixedVersion": "0:2.42.5-1.el8",
      "fix": "RHSA-2024:2982",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2024-2982",
      "released": "2024-05-22T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "webkit2gtk3-devel",
      "release": "RHEL 9",
      "fixedVersion": "0:2.42.5-1.el9",
      "fix": "RHSA-2024:2126",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2024-2126",
      "released": "2024-04-30T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "webkit2gtk3-devel",
      "release": "almalinux 8",
      "fixedVersion": "2.50.3-1.el8_10",
      "fix": "ALSA-2025:22789",
      "url": "https://patchblox.com/security/fix/linux/alsa-2025-22789",
      "released": "2025-12-08T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "webkit2gtk3-devel",
      "release": "almalinux 9",
      "fixedVersion": "2.50.3-1.el9_7",
      "fix": "ALSA-2025:22790",
      "url": "https://patchblox.com/security/fix/linux/alsa-2025-22790",
      "released": "2025-12-08T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "webkit2gtk3-devel",
      "release": "ol 8",
      "fixedVersion": "0:2.50.3-1.el8_10",
      "fix": "ELSA-2025-22789",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-22789",
      "released": "2025-12-08T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "webkit2gtk3-devel",
      "release": "ol 9",
      "fixedVersion": "0:2.50.3-1.el9_7",
      "fix": "ELSA-2025-22790",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-22790",
      "released": "2025-12-08T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "webkit2gtk3-jsc",
      "release": "RHEL 8",
      "fixedVersion": "0:2.42.5-1.el8",
      "fix": "RHSA-2024:2982",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2024-2982",
      "released": "2024-05-22T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "webkit2gtk3-jsc",
      "release": "RHEL 9",
      "fixedVersion": "0:2.42.5-1.el9",
      "fix": "RHSA-2024:2126",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2024-2126",
      "released": "2024-04-30T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "webkit2gtk3-jsc",
      "release": "almalinux 8",
      "fixedVersion": "2.50.3-1.el8_10",
      "fix": "ALSA-2025:22789",
      "url": "https://patchblox.com/security/fix/linux/alsa-2025-22789",
      "released": "2025-12-08T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "webkit2gtk3-jsc",
      "release": "almalinux 9",
      "fixedVersion": "2.50.3-1.el9_7",
      "fix": "ALSA-2025:22790",
      "url": "https://patchblox.com/security/fix/linux/alsa-2025-22790",
      "released": "2025-12-08T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "webkit2gtk3-jsc",
      "release": "ol 8",
      "fixedVersion": "0:2.50.3-1.el8_10",
      "fix": "ELSA-2025-22789",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-22789",
      "released": "2025-12-08T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "webkit2gtk3-jsc",
      "release": "ol 9",
      "fixedVersion": "0:2.50.3-1.el9_7",
      "fix": "ELSA-2025-22790",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-22790",
      "released": "2025-12-08T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "webkit2gtk3-jsc-devel",
      "release": "RHEL 8",
      "fixedVersion": "0:2.42.5-1.el8",
      "fix": "RHSA-2024:2982",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2024-2982",
      "released": "2024-05-22T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "webkit2gtk3-jsc-devel",
      "release": "RHEL 9",
      "fixedVersion": "0:2.42.5-1.el9",
      "fix": "RHSA-2024:2126",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2024-2126",
      "released": "2024-04-30T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "webkit2gtk3-jsc-devel",
      "release": "almalinux 8",
      "fixedVersion": "2.50.3-1.el8_10",
      "fix": "ALSA-2025:22789",
      "url": "https://patchblox.com/security/fix/linux/alsa-2025-22789",
      "released": "2025-12-08T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "webkit2gtk3-jsc-devel",
      "release": "almalinux 9",
      "fixedVersion": "2.50.3-1.el9_7",
      "fix": "ALSA-2025:22790",
      "url": "https://patchblox.com/security/fix/linux/alsa-2025-22790",
      "released": "2025-12-08T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "webkit2gtk3-jsc-devel",
      "release": "ol 8",
      "fixedVersion": "0:2.50.3-1.el8_10",
      "fix": "ELSA-2025-22789",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-22789",
      "released": "2025-12-08T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "webkit2gtk3-jsc-devel",
      "release": "ol 9",
      "fixedVersion": "0:2.50.3-1.el9_7",
      "fix": "ELSA-2025-22790",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-22790",
      "released": "2025-12-08T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "webkit2gtk3-soup2",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "2.50.4-150600.12.54.1",
      "fix": "SUSE-SU-2026:0021-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-0021-1",
      "released": "2026-01-05T11:12:33Z"
    },
    {
      "platform": "linux",
      "product": "webkit2gtk3-soup2",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "2.50.4-160000.1.1",
      "fix": "OPENSUSE-SU-2026:20065-1",
      "url": "https://patchblox.com/security/fix/linux/opensuse-su-2026-20065-1",
      "released": "2026-01-20T12:08:51Z"
    },
    {
      "platform": "linux",
      "product": "webkit2gtk3-soup2",
      "release": "sles 15.6",
      "fixedVersion": "2.50.4-150600.12.54.1",
      "fix": "SUSE-SU-2026:0021-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-0021-1",
      "released": "2026-01-05T11:12:33Z"
    },
    {
      "platform": "linux",
      "product": "webkit2gtk3-soup2",
      "release": "sles 15.7",
      "fixedVersion": "2.50.4-150600.12.54.1",
      "fix": "SUSE-SU-2026:0021-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-0021-1",
      "released": "2026-01-05T11:12:33Z"
    },
    {
      "platform": "linux",
      "product": "webkit2gtk4",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "2.50.4-150600.12.54.1",
      "fix": "SUSE-SU-2026:0021-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-0021-1",
      "released": "2026-01-05T11:12:33Z"
    },
    {
      "platform": "linux",
      "product": "webkit2gtk4",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "2.50.4-160000.1.1",
      "fix": "OPENSUSE-SU-2026:20065-1",
      "url": "https://patchblox.com/security/fix/linux/opensuse-su-2026-20065-1",
      "released": "2026-01-20T12:08:51Z"
    },
    {
      "platform": "linux",
      "product": "webkit2gtk4",
      "release": "sles 15.6",
      "fixedVersion": "2.50.4-150600.12.54.1",
      "fix": "SUSE-SU-2026:0021-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-0021-1",
      "released": "2026-01-05T11:12:33Z"
    },
    {
      "platform": "linux",
      "product": "webkit2gtk4",
      "release": "sles 15.7",
      "fixedVersion": "2.50.4-150600.12.54.1",
      "fix": "SUSE-SU-2026:0021-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-0021-1",
      "released": "2026-01-05T11:12:33Z"
    },
    {
      "platform": "linux",
      "product": "webkit2gtk4",
      "release": "sles 16.0",
      "fixedVersion": "2.50.4-160000.1.1",
      "fix": "SUSE-SU-2026:20102-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-20102-1",
      "released": "2026-01-20T12:37:33Z"
    },
    {
      "platform": "linux",
      "product": "wpewebkit",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "2.42.0-1",
      "fix": "DEBIAN-CVE-2023-43000",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2023-43000",
      "released": "2025-11-05T19:15:47Z"
    },
    {
      "platform": "linux",
      "product": "wpewebkit",
      "release": "Debian 14",
      "fixedVersion": "2.42.0-1",
      "fix": "DEBIAN-CVE-2023-43000",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2023-43000",
      "released": "2025-11-05T19:15:47Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-09T07:25:28Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}