wpewebkit | Snyk

Direct Vulnerabilities

Known vulnerabilities in the wpewebkit package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
L External Control of Assumed-Immutable Web Parameter	*
L CVE-2026-9981	*
H Use After Free	*
L Out-of-bounds Write	*
L External Control of Assumed-Immutable Web Parameter	*
L Out-of-bounds Read	*
H Use After Free	*
L Improper Input Validation	*
L Use After Free	*
L Use After Free	*
L Information Exposure	*
L Use After Free	*
L Out-of-bounds Read	*
L CVE-2026-65334	*
L CVE-2026-43670	*
H Out-of-bounds Write	*
L Improper Input Validation	*
L Use of Uninitialized Variable	*
L Use of Uninitialized Variable	*
L Use After Free	*
L Access of Resource Using Incompatible Type ('Type Confusion')	*
L Use After Free	*
L Out-of-bounds Write	*
L Use After Free	*
L Out-of-bounds Write	*
L Out-of-bounds Read	*
L Improper Input Validation	*
L Out-of-bounds Write	*
L Improper Input Validation	*
L Use After Free	*
L Use of Uninitialized Variable	*
L Out-of-bounds Write	*
L Information Exposure	*
L Use of Uninitialized Resource	*
L Out-of-bounds Read	*
L Use of Uninitialized Resource	*
L Out-of-bounds Read	*
L Use of Uninitialized Resource	*
L Heap-based Buffer Overflow	*
L Use of Uninitialized Resource	*
L CVE-2026-65340	*
H Use After Free	*
L Use After Free	*
M Out-of-bounds Read	*
H External Control of Assumed-Immutable Web Parameter	*
L CVE-2026-64782	*
L CVE-2026-64780	*
L CVE-2026-64778	*
L Heap-based Buffer Overflow	*
L Out-of-bounds Write	*
L Access of Resource Using Incompatible Type ('Type Confusion')	*
L Use of Uninitialized Variable	*
L CVE-2025-26416	*
H Out-of-bounds Write	*
L Out-of-bounds Write	*
L Use of Uninitialized Variable	*
L CVE-2026-17683	*
L CVE-2024-43767	*
L Out-of-bounds Write	*
L Use After Free	*
L Heap-based Buffer Overflow	*
L Heap-based Buffer Overflow	*
L Use After Free	*
L Improper Input Validation	*
L Improper Input Validation	*
L External Control of Assumed-Immutable Web Parameter	*
L Use After Free	*
L Improper Input Validation	*
L CVE-2026-13859	*
C Improper Input Validation	*
L Heap-based Buffer Overflow	*
L Use of Uninitialized Resource	*
L Use of Uninitialized Variable	*
L Use After Free	*
L Out-of-bounds Write	*
L Stack-based Buffer Overflow	*
L Out-of-bounds Write	*
L CVE-2026-10941	*
M Use of Uninitialized Variable	*
L CVE-2026-10011	*
L Access of Resource Using Incompatible Type ('Type Confusion')	*
L CVE-2026-65351	*
L Information Exposure	*
L CVE-2026-65331	*
L CVE-2026-64781	*
L CVE-2026-5283	*
L Heap-based Buffer Overflow	*
L Integer Overflow or Wraparound	*
H Out-of-Bounds	*
L Use After Free	*
L Use After Free	*
L Use After Free	*
L Use of Uninitialized Variable	*
L CVE-2026-17801	*
L CVE-2026-9975	*
L CVE-2026-9910	*
L Improper Protection Against Physical Side Channels	*
L Use After Free	*
L Out-of-bounds Read	*
L Use After Free	*
M Integer Overflow or Wraparound	*
L Access of Resource Using Incompatible Type ('Type Confusion')	*
L Out-of-bounds Write	*
L Out-of-bounds Read	*
L Out-of-bounds Write	*
L Use After Free	*
L Improper Input Validation	*
L Heap-based Buffer Overflow	*
L Access of Resource Using Incompatible Type ('Type Confusion')	*
L CVE-2026-65338	*
L Use of Uninitialized Variable	*
L CVE-2026-14410	*
L CVE-2026-65337	*
L CVE-2026-64784	*
L Improper Input Validation	*
L CVE-2026-64753	*
L External Control of Assumed-Immutable Web Parameter	*
L CVE-2026-11191	*
L Use of Uninitialized Variable	*
L Use of Uninitialized Variable	*
L Use of Uninitialized Variable	*
L Out-of-bounds Read	*
L External Control of Assumed-Immutable Web Parameter	*
L Improper Input Validation	*
L Improper Input Validation	*
L Out-of-bounds Read	*
L Out-of-bounds Read	*
M Heap-based Buffer Overflow	*
H Integer Underflow	*
L CVE-2026-10881	*
L External Control of Assumed-Immutable Web Parameter	*
L CVE-2025-32318	*
L Integer Overflow or Wraparound	*
L Use of Uninitialized Variable	*
L Out-of-bounds Read	*
L Improper Input Validation	*
L CVE-2026-15774	*
L Use of Uninitialized Variable	*
L Improper Input Validation	*
L CVE-2024-43097	*
L Use After Free	*
L Out-of-bounds Read	*
L Use of Uninitialized Variable	*
C Improper Input Validation	*
L Use of Uninitialized Variable	*
L Use of Uninitialized Variable	*
L Out-of-bounds Read	*
L Use After Free	*
L Use of Uninitialized Variable	*
L Out-of-bounds Write	*
L CVE-2025-54627	*
L Use of Uninitialized Variable	*
L Out-of-bounds Write	*
L Out-of-bounds Read	*
L Use After Free	*
H Heap-based Buffer Overflow	*
L CVE-2026-9913	*
L CVE-2026-9982	*
L Improper Input Validation	*
L Use After Free	*
L Use of Uninitialized Variable	*
L CVE-2026-84635	*
L Heap-based Buffer Overflow	*
L Use of Uninitialized Resource	*
H Integer Overflow or Wraparound	*
L Out-of-bounds Write	*
L External Control of Assumed-Immutable Web Parameter	*
L Use After Free	*
L Improper Input Validation	*
L Heap-based Buffer Overflow	*
L Out-of-bounds Write	*
L External Control of Assumed-Immutable Web Parameter	*
C Integer Overflow or Wraparound	*
L Use of Uninitialized Resource	*
L CVE-2026-86898	*
L Use of Uninitialized Resource	*
L Race Condition	*
L Use After Free	*
L CVE-2026-7354	*
L CVE-2026-65336	*
L CVE-2026-65332	*
L CVE-2026-65333	*
L CVE-2026-65341	*
L CVE-2026-64715	*
L Heap-based Buffer Overflow	*
L Out-of-bounds Read	*
L CVE-2026-64779	*
L Integer Overflow or Wraparound	*
H External Control of Assumed-Immutable Web Parameter	*
L Out-of-bounds Write	*
L Use After Free	*
L Use of Uninitialized Variable	*
L Use of Uninitialized Variable	*
L Use After Free	*
L Use of Uninitialized Variable	*
L CVE-2026-17702	*
L Use After Free	*
L Integer Overflow or Wraparound	*
L Use of Uninitialized Variable	*
L Use After Free	*
L CVE-2026-15766	*
L Use of Uninitialized Variable	*
L Use of Uninitialized Variable	*
L External Control of Assumed-Immutable Web Parameter	*
L Improper Input Validation	*
L Out-of-bounds Read	*
L Out-of-bounds Write	*
L Use of Uninitialized Variable	*
L Improper Input Validation	*
L Heap-based Buffer Overflow	*
L Use of Uninitialized Variable	*
L Out-of-bounds Read	*
L Use After Free	*
C Improper Input Validation	*
L Use of Uninitialized Variable	*
L Use of Uninitialized Variable	*
C Improper Input Validation	*
L Access of Resource Using Incompatible Type ('Type Confusion')	*
L Out-of-bounds Read	*
L Out-of-bounds Write	*
M External Control of Assumed-Immutable Web Parameter	*
L Out-of-bounds Write	*
L Use of Uninitialized Variable	*
L Out-of-bounds Read	*
L Use of Uninitialized Variable	*
L Use After Free	*
L Use After Free	*
L External Control of Assumed-Immutable Web Parameter	*
H Out-of-bounds Write	*
H Out-of-bounds Write	*
L CVE-2024-43768	*
C Out-of-bounds Write	*
H Buffer Overflow	*
H Use After Free	*
L CVE-2026-64730	*
L CVE-2026-43804	*
L CVE-2026-64728	*
L CVE-2026-64783	*
L CVE-2026-64713	*
L CVE-2026-64757	*
L CVE-2026-64787	*
L CVE-2026-28984	*
L CVE-2026-64719	*
L CVE-2026-43660	*
L CVE-2026-28905	*
L CVE-2026-28953	*
L CVE-2026-28955	*
L CVE-2026-28904	*
L CVE-2026-28883	*
L CVE-2026-28958	*
L CVE-2026-43658	*
L CVE-2026-28907	*
L CVE-2026-28902	*
L CVE-2026-28847	*
L CVE-2026-28901	*
L CVE-2026-28946	*
L CVE-2026-28947	*
L CVE-2026-28903	*
L CVE-2026-28942	*
L CVE-2026-43732	*
L CVE-2026-43726	*
L CVE-2026-43740	*
L CVE-2026-43731	*
L CVE-2026-43716	*
L CVE-2026-43701	*
L CVE-2026-43705	*
L CVE-2026-43745	*
L CVE-2026-43707	*
L CVE-2026-43721	*
L CVE-2026-43715	*
H CVE-2024-4367	*
L CVE-2026-43742	*
L CVE-2026-43734	*
L CVE-2026-43713	*
L CVE-2026-43712	*
L CVE-2026-43725	*
L CVE-2026-43663	*
L CVE-2026-43676	*
L CVE-2026-39872	*
L CVE-2026-43699	*
L CVE-2026-43727	*
L CVE-2026-43720	*
L CVE-2026-20691	*
L CVE-2026-28859	*
L CVE-2026-28861	*
L CVE-2026-28857	*
L CVE-2026-20664	*
L CVE-2026-28871	*
L CVE-2026-20643	*
L CVE-2026-20665	*
L CVE-2026-20644	*
L CVE-2025-43511	*
L Out-of-bounds Write	*
L CVE-2025-31277	*
H Resource Exhaustion	*
L CVE-2026-20635	*
L CVE-2025-43457	*
L CVE-2025-43438	*
L CVE-2026-20636	*
L Out-of-bounds Write	*
L CVE-2025-31223	*
L CVE-2025-43213	*
M CVE-2026-20676	*
L CVE-2025-46299	*
L CVE-2025-43441	*
L CVE-2025-43214	*
L CVE-2026-20608	*
L CVE-2025-43535	*
L CVE-2025-43529	*
L Out-of-bounds Write	*
L CVE-2025-43541	*
L CVE-2025-43536	*
L Race Condition	*
L Out-of-bounds Write	*
H Origin Validation Error	*
H Buffer Overflow	*
L CVE-2025-43458	*
L CVE-2025-43421	*
L CVE-2025-43440	*
L CVE-2025-43419	*
H Out-of-bounds Read	*
L CVE-2025-43430	*
L CVE-2025-43480	*
H Use After Free	*
L Out-of-bounds Write	*
L CVE-2025-43429	*
L CVE-2025-43427	*
L CVE-2025-43425	*
L CVE-2025-43434	*
L CVE-2025-43443	*
L CVE-2025-43392	*
L CVE-2025-43432	*
L CVE-2025-43343	*
L CVE-2025-43356	*
L CVE-2025-43342	*
L CVE-2025-43368	*
L CVE-2025-43272	*
L CVE-2025-43265	*
L Improper Input Validation	*
L CVE-2025-43216	*
L CVE-2025-43227	*
L CVE-2025-43212	*
L CVE-2025-24189	*
L CVE-2025-43211	*
L CVE-2025-43228	*
L CVE-2025-31278	*
L CVE-2025-31273	*
L CVE-2025-43240	*
L CVE-2025-31257	*
L CVE-2023-42875	*
L CVE-2025-31204	*
L CVE-2023-42970	*
L CVE-2025-31206	*
L CVE-2025-24223	*
L CVE-2025-31215	*
L CVE-2025-31205	*
L CVE-2025-24216	*
L CVE-2024-54551	*
L CVE-2025-24209	*
L CVE-2025-24213	*
L CVE-2025-24208	*
L CVE-2025-30427	*
L CVE-2025-24264	*
M CVE-2024-54467	*
M CVE-2024-44192	*
C Out-of-bounds Write	*
M CVE-2025-24158	*
H Out-of-bounds Write	*
M CVE-2025-24162	*
H Arbitrary Code Injection	*
M CVE-2024-54658	*
M CVE-2025-24143	*
H Arbitrary Command Injection	*
H Access of Resource Using Incompatible Type ('Type Confusion')	*
M CVE-2024-54502	*
C Out-of-bounds Write	*
H CVE-2024-54479	*
H CVE-2024-54508	*
H CVE-2024-44308	*
M Cross-site Scripting (XSS)	*
M CVE-2024-44296	*
M CVE-2024-44185	*
M Out-of-bounds Write	*
H CVE-2024-27820	*
H CVE-2024-27808	*
H Integer Overflow or Wraparound	*
M CVE-2024-27838	*
M CVE-2024-40866	*
M Origin Validation Error	*
H Out-of-Bounds	*
M CVE-2024-23271	*
M Cross-site Scripting (XSS)	*
M CVE-2024-40789	*
M CVE-2024-40794	*
M Out-of-bounds Read	*
M Use After Free	*
C Use After Free	*
M Out-of-bounds Read	*
M Use After Free	*
M CVE-2024-27834	*
M Arbitrary Code Injection	*
M CVE-2024-23254	*
M CVE-2024-23284	*
H CVE-2023-42950	*
M CVE-2024-23263	*
M CVE-2023-42956	*
M Authentication Bypass	*
H Resource Management Errors	*
H CVE-2023-42833	<2.38.0-1
H Access of Resource Using Incompatible Type ('Type Confusion')	*
C Use After Free	*
H CVE-2024-23213	*
M CVE-2024-23206	*
M CVE-2023-42883	*
H CVE-2023-42890	*
H Out-of-bounds Write	*
M Out-of-bounds Read	*
M Out-of-Bounds	*
H CVE-2023-42852	*
M Improper Restriction of Rendered UI Layers or Frames	<2.38.4-1
M CVE-2022-46725	<2.38.4-1
M CVE-2022-46705	<2.38.4-1
H CVE-2023-32359	*
M CVE-2022-32933	<2.38.0-1
H Use After Free	*
H Use After Free	*
H CVE-2023-35074	*
H Improper Check for Unusual or Exceptional Conditions	*
H CVE-2023-41074	*
H CVE-2023-40451	*
C CVE-2023-40397	*
H Use After Free	*
M CVE-2023-32370	*
H CVE-2023-38611	*
M CVE-2023-38599	*
H CVE-2023-38595	*
H CVE-2023-38592	*
H CVE-2023-38600	*
H CVE-2023-38597	*
M CVE-2023-38133	*
H CVE-2023-38572	*
H CVE-2023-38594	*
H CVE-2023-32393	*
H CVE-2023-37450	*
H CVE-2022-48503	<2.38.0-1
H Access of Resource Using Incompatible Type ('Type Confusion')	*
H Out-of-bounds Write	*
L CVE-2023-32409	*
H Use After Free	*
M Out-of-bounds Read	*
M CVE-2023-27932	<2.38.6-1
H Use After Free	<2.38.6-1
M CVE-2023-27954	<2.38.6-1
H Out-of-bounds Write	<2.38.6-1
H Use After Free	<2.38.0-1
H Use After Free	<2.38.0-1
H Use After Free	<2.38.0-1
H Use After Free	<2.38.0-1
H Use After Free	<2.38.0-1
H Access of Resource Using Incompatible Type ('Type Confusion')	<2.38.5-1
H CVE-2023-23518	<2.38.4-1
H CVE-2023-23517	<2.38.4-1
H Use After Free	<2.38.4-1
H Out-of-bounds Write	<2.38.3-1
H Access of Resource Using Incompatible Type ('Type Confusion')	<2.38.3-1
H Use After Free	<2.38.3-1
M CVE-2022-46692	<2.38.3-1
H Out-of-bounds Write	<2.38.0-1
H Out-of-bounds Write	<2.38.1-1
M CVE-2022-46698	<2.38.3-1
H Out-of-bounds Write	<2.38.3-1
M CVE-2022-42852	<2.38.3-1
M CVE-2022-42824	<2.38.2-1
M Improper Restriction of Rendered UI Layers or Frames	<2.38.2-1
M CVE-2022-32923	<2.38.0-1
H Out-of-bounds Write	<2.38.0-1
H Access of Resource Using Incompatible Type ('Type Confusion')	<2.38.2-1
H Out-of-bounds Write	<2.38.0-1
M Improper Restriction of Rendered UI Layers or Frames	<2.36.6-1
H Out-of-bounds Write	<2.36.7-1
M CVE-2022-32816	<2.36.6-1
H Out-of-bounds Write	<2.36.6-1
M CVE-2022-22662	<2.36.0-2
M CVE-2022-22677	<2.36.4-1
H Use After Free	<2.36.4-1
L Out-of-bounds Write	<2.36.6-1
H Use After Free	<2.36.3-1
H Out-of-bounds Write	<2.36.3-1
H Use After Free	<2.36.3-1
H Out-of-bounds Write	<2.36.3-1
H Out-of-bounds Write	<2.36.3-1
H Out-of-bounds Write	<2.36.1-1
H Out-of-bounds Write	<2.36.0-2
H Use After Free	<2.36.0-2
H Use After Free	<2.36.0-2
H CVE-2022-22637	<2.34.4-1
H Use After Free	<2.34.6-1
H Use After Free	<2.34.5-1
M CVE-2022-22592	<2.34.5-1
M CVE-2022-22589	<2.34.5-1

Vulnerability

Vulnerable Version

External Control of Assumed-Immutable Web Parameter