SUSE-SU-2026:0044-1: mozjs60&distro=openSUSE Leap 15.6
CVSS: UnknownPublished
Published 06-01-2026Last modified 04-02-2026
Vulnerability summary
SUSE-SU-2026:0044-1 is a vulnerability in mozjs60&distro=openSUSE Leap 15.6 with no CVSS score yet.
CVSS score
Not scored
010
No CVSS score recordedEPSS score
Not scored
0%100%
No EPSS score yetKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Advisory lineage
Upstream 4 · Downstream 0 · Related 4Timeline
- 06-01-2026PublishedVulnerability first disclosed.
- 04-02-2026Last modifiedVulnerability information updated.
Description
Security update for mozjs60 This update for mozjs60 fixes the following issues: - CVE-2024-45492: embedded expat: detect integer overflow in function nextScaffoldPart (bsc#1230038) - CVE-2024-45491: embedded expat: detect integer overflow in dtdCopy (bsc#1230037) - CVE-2024-45490: embedded expat: reject negative len for XML_ParseBuffer (bsc#1230036) - CVE-2024-50602: libexpat: DoS via XML_ResumeParser (bsc#1232602)
CVSS metrics
Risk metrics not yet published.
EPSS trend
No EPSS score has been published for this record yet.
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Suse5 products
- mozjs60&distro=SUSE Linux Enterprise Micro 5.2< 60.9.0-150200.6.8.1
- mozjs60&distro=SUSE Linux Enterprise Micro 5.3< 60.9.0-150200.6.8.1
- mozjs60&distro=SUSE Linux Enterprise Micro 5.4< 60.9.0-150200.6.8.1
- mozjs60&distro=SUSE Linux Enterprise Module for Basesystem 15 SP7< 60.9.0-150200.6.8.1
- mozjs60&distro=SUSE Linux Enterprise Module for Desktop Applications 15 SP7< 60.9.0-150200.6.8.1
Opensuse1 product
- mozjs60&distro=openSUSE Leap 15.6< 60.9.0-150200.6.8.1
2 vendors · 6 products