CVE-2026-38978

Опубликовано: 02 июн. 2026

Источник: debian

EPSS Низкий

Описание

transmission through 4.1.1 was found to have a clickjacking weakness in the browser-facing WebUI and RPC response paths.

Пакет	Статус	Версия исправления	Релиз	Тип
transmission	fixed	4.1.2+dfsg-1		package
transmission	no-dsa		trixie	package
transmission	no-dsa		bookworm	package
transmission	postponed		bullseye	package

https://github.com/transmission/transmission/issues/8726
https://github.com/transmission/transmission/pull/8747
https://github.com/transmission/transmission/commit/6b24c1c214ec6a44fa5fdff0ce7da6b16d8ecaa8
https://github.com/transmission/transmission/commit/e51d77e202206ee1389cbd6d9ab154421942b530 (4.1.2)

EPSS

Процентиль: 23%

0.00305

Низкий

CVE-2026-38978

CVSS3: 5.3

ubuntu

3 месяца назад

transmission through 4.1.1 was found to have a clickjacking weakness in the browser-facing WebUI and RPC response paths.

CVE-2026-38978

CVSS3: 5.3

nvd

3 месяца назад

transmission through 4.1.1 was found to have a clickjacking weakness in the browser-facing WebUI and RPC response paths.

openSUSE-SU-2026:21189-1

suse-cvrf

около 2 месяцев назад

Security update for transmission

GHSA-6rg3-8m29-j28q

CVSS3: 5.3

github

3 месяца назад

transmission through 4.1.1 was found to have a clickjacking weakness in the browser-facing WebUI and RPC response paths.

EPSS

Процентиль: 23%

0.00305

Низкий