xdg-utils

6 results · Feed

• Low 2.7
  CVE-2025-52968

  xdg-open in xdg-utils through 1.2.1 can send requests containing SameSite=Strict cookies, which can facilitate CSRF. (F…

  Freedesktop xdg-utils xdg-utils xdg-utils Debian Ubuntu
  Jun 23, 2025
• High 7.4
  CVE-2022-4055

  When xdg-mail is configured to use thunderbird for mailto URLs, improper parsing of the URL can lead to additional head…

  xdg-utils xdg-utils Debian Ubuntu
  Nov 18, 2022
• Unscored —
  CVE-2015-1877

  The open_generic_xdg_mime function in xdg-open in xdg-utils 1.1.0 rc1 in Debian, when using dash, does not properly han…

  xdg-utils Debian
  Jun 2, 2021
• Unscored —
  CVE-2020-27748

  A flaw was found in the xdg-email component of xdg-utils-1.1.0-rc1 and newer. When handling mailto: URIs, xdg-email all…

  xdg-utils xdg-utils Debian Ubuntu
  Jun 1, 2021
• Unscored —
  CVE-2017-18266

  The open_envvar function in xdg-open in xdg-utils before 1.1.3 does not validate strings before launching the program s…

  xdg-utils xdg-utils Debian Ubuntu
  May 10, 2018
• Unscored —
  CVE-2014-9622

  Eval injection vulnerability in xdg-utils 1.1.0 RC1, when no supported desktop environment is identified, allows contex…

  xdg-utils Debian
  Jan 21, 2015