BR
Product
browser
by lightpanda-io · last CVE Jul 15, 2026
2
CVEs
0
On KEV
9.3
Max CVSS
0
New 30D
Severity mix
Critical 2High 0Medium 0Low 0
Watch

Add browser to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-52842
9.3
0%
Jul 15
Lightpanda:URL parser misidentifies page origin for URLs containing @ in the path - Same-Origin Policy bypass
Affected: < 0.3.1
CVE-2026-52843
9.3
0%
Jul 15
Lightpanda: fetch() and XMLHttpRequest attach session cookies to cross-origin requests regardless of credentials mode
Affected: < 0.2.9
Showing 2