Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
5.3
Lynx could let attackers read private data
published 4 days ago
Summary
The Lynx web browser package can be tricked into exposing information it should keep secret. This could let a malicious user see data that was meant to stay private, potentially impacting customers or internal records. Install the latest Lynx release or apply the vendor's security update as soon as possible to close the gap.
What to do
- Update cleanstart lynx to version 2.8.9_p1-r3.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| CleanStart | cleanstart | lynx |
< 2.8.9_p1-r3 Fix: upgrade to 2.8.9_p1-r3
|
Original advisory text
Lynx through 2
Security vulnerability affects the lynx package. Lynx through 2.
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker partial control (estimated)
Timeline
Published31 Oct 2026
Updated31 Oct 2026
First seen31 Oct 2026
Sources
CLEANSTART-2024-EP91241 · OSV
Track software like this
Free during beta