lightpanda-io browser vulnerabilities
2 published CVEs name lightpanda-io browser among the affected products.
- 2Published CVEs2 of them scored
- 2Last 12 monthspublished in the last year
- 2Critical0 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-52842
Lightpanda:URL parser misidentifies page origin for URLs containing @ in the path - Same-Origin Policy bypass
lightpanda-io · browser
Critical9.3 - CVE-2026-52843
Lightpanda: fetch() and XMLHttpRequest attach session cookies to cross-origin requests regardless of credentials mode
lightpanda-io · browser
Critical9.3