Home — WebKit Weekly

100 Security bugs analyzed

100 Dev commits covered

44 WebKit CVEs covered

20 Weekly reports

233 Contributors

This week's picks

Of the 453 WebKit commits landed this week, we selected 16 for close analysis.

A cookie check that only asked whether the message agreed with itself.

The callback kept the speech engine alive and let its listener die.

Constant folding deleted the one check the rest of the compile had already spent

A prior fix taught one `End` handler to widen. The parser has two.

One report per CVE. If a CVE is assigned to a commit that wasn't analyzed in a weekly report, an additional report is published.

409 security fixes · browse all

15-week window · darker = more fixes

Weekly picks Outlier (±1σ) Average: 2.0% of commits analyzed

WebCoreWebKitJSCWTFWebInspectorOther Security · Hardening