GHSA-w4w9-rwjc-mvgm

GHSA-w4w9-rwjc-mvgm PUBLISHED CVSS 6.099999904632568 MEDIUM

Record from GitHub Advisory Database · Published December 17, 2021

XSS can occur in GNOME Web (aka Epiphany) before 40.4 and 41.x before 41.1 via an about: page, as demonstrated by ephy-about:overview when a user visits an XSS payload page often enough to place that page on the Most Visited list.

Risk scores

CVSS 3.1

6.099999904632568

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Timeline

Dec 17, 2021 CVE Published
Apr 29, 2026 Distribution Patch
Apr 29, 2026 Security Advisory (2 in total, the first dated here)

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln GHSA-w4w9-rwjc-mvgm
vulnetix vdb fixes GHSA-w4w9-rwjc-mvgm

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/GHSA-w4w9-rwjc-mvgm/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

Look up in the Resolve Platform →