CVE-2021-45085: Debian Linux

Medium severity, CVSS 6.1. EPSS: 1.6% chance of exploitation in the next 30 days.

XSS can occur in GNOME Web (aka Epiphany) before 40.4 and 41.x before 41.1 via an about: page, as demonstrated by ephy-about:overview when a user visits an XSS payload page often enough to place that page on the Most Visited list.

Affected products

• Debian Debian Linux: version 10.0 only; version 11.0 only
• Gnome Epiphany: before 40.4 (fixed in 40.4); from 41.0, before 41.1 (fixed in 41.1)

Published 2021-12-16. Last modified 2026-06-17.