debian/ublock-origin vulnerabilities

Latest debian/ublock-origin CVEs

Newest publication first

1. DLA-4356-1 ublock-origin - security update

   Published 2025-10-31

   Unknown

2. DLA-4215-1 ublock-origin - security update

   Published 2025-06-12

   Unknown

3. CVE-2025-4215 gorhill uBlock Origin UI 1p-filters.js currentStateChanged redos

   Published 2025-05-02

   Low·CVSS 2.3 EPSS 0.79%

   A vulnerability was found in gorhill uBlock Origin up to 1.63.3b16. It has been classified as problematic. Affected is the function currentStateChanged of the file src/js/1p-filters.js of the component UI. The manipulation leads to inefficient regular expression complexity. It is...

4. CVE-2022-32308 Cross Site Scripting (XSS) vulnerability in uBlock Origin extension before 1.41.1 allows remote attackers to run arbitrary code via a spoofed 'MessageSender.url' to the browser renderer process.

   Published 2022-07-13

   Medium·CVSS 6.1 EPSS 0.66%

   Cross Site Scripting (XSS) vulnerability in uBlock Origin extension before 1.41.1 allows remote attackers to run arbitrary code via a spoofed 'MessageSender.url' to the browser renderer process.

5. DLA-3062-1 ublock-origin - security update

   Published 2022-06-29

   Unknown

6. CVE-2021-36773 uBlock Origin before 1.36.2 and nMatrix before 4.4.9 support an arbitrary depth of parameter nesting for strict blocking, which allows crafted web sites to cause a denial of service (unbounded recursi...

   Published 2021-07-18

   High·CVSS 7.5 EPSS 1.3%

   uBlock Origin before 1.36.2 and nMatrix before 4.4.9 support an arbitrary depth of parameter nesting for strict blocking, which allows crafted web sites to cause a denial of service (unbounded recursion that can trigger memory consumption and a loss of all blocking functionality)...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.