LI
Vendor
lightpanda-io
2
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-52842 | BR browser lightpanda-io | 9.3 | Jul 15 | Lightpanda:URL parser misidentifies page origin for URLs containing @ in the path - Same-Origin Policy bypass |
| CVE-2026-52843 | BR browser lightpanda-io | 9.3 | Jul 15 | Lightpanda: fetch() and XMLHttpRequest attach session cookies to cross-origin requests regardless of credentials mode |