XSS can occur in GNOME Web (aka Epiphany) before 40.4 and 41.x before 41.1 when View Source mode or Reader mode is used, as demonstrated by a a page title.
| Software | From | Fixed in |
|---|---|---|
| gnome / epiphany | 41.0 | 41.1 |
| gnome / epiphany | - | 40.4 |
| debian / debian_linux | 10.0 | 10.0.x |
| debian / debian_linux | 11.0 | 11.0.x |