Skip to content
OpenAdvisories

Package · Debian

lexbor

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.2
    CVE-2026-29079

    Type Confusion in Lexbor Fragment Parser

    Lexbor is a web browser engine library. Prior to 2.7.0, a type‑confusion vulnerability exists in Lexbor’s HTML fragment parser. When ns = UNDEF, a comment is created using the “unknown element” constructor. The comment’s data are written into the element’s fi…

    lexbor lexbor php85 php84 Debian Ubuntu Alpine
  • High 8.2
    CVE-2026-29078

    Integer Underflow in Lexbor ISO‑2022‑JP Encoder

    Lexbor is a web browser engine library. Prior to 2.7.0, the ISO‑2022‑JP encoder in Lexbor fails to reset the temporary size variable between iterations. The statement ctx->buffer_used -= size with a stale size = 3 causes an integer underflow that wraps to SIZ…

    lexbor lexbor php85 php84 Debian Ubuntu Alpine