Skip to content
OpenAdvisories

Package · PyPI

qutebrowser

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Feed

  • High 8.8
    CVE-2021-41146

    Arbitrary command execution on Windows in qutebrowser

    qutebrowser is an open source keyboard-focused browser with a minimal GUI. Starting with qutebrowser v1.7.0, the Windows installer for qutebrowser registers a `qutebrowserurl:` URL handler. With certain applications, opening a specially crafted `qutebrowserur…

    qutebrowser qutebrowser qutebrowser PyPI
  • Low 3.5
    CVE-2020-11054

    Incorrect Provision of Specified Functionality in qutebrowser

    In qutebrowser versions less than 1.11.1, reloading a page with certificate errors shows a green URL. After a certificate error was overridden by the user, qutebrowser displays the URL as yellow (colors.statusbar.url.warn.fg). However, when the affected websi…

    qutebrowser qutebrowser qutebrowser qutebrowser Debian Ubuntu PyPI
  • Critical 9.3
    CVE-2018-10895

    Qutebrowser CSRF Vulnerability

    qutebrowser before version 1.4.1 is vulnerable to a cross-site request forgery flaw that allows websites to access 'qute://*' URLs. A malicious website could exploit this to load a 'qute://settings/set' URL, which then sets 'editor.command' to a bash script, …

    qutebrowser cross-site request forgery flaw allows sites to access 'qute qutebrowser qutebrowser Debian Ubuntu PyPI
  • Medium 6.1
    CVE-2018-1000559

    Qutebrowser XSS Vulnerability

    qutebrowser version introduced in v0.11.0 (1179ee7a937fb31414d77d9970bac21095358449) contains a Cross Site Scripting (XSS) vulnerability in history command, qute://history page that can result in Via injected JavaScript code, a website can steal the user's br…

    qutebrowser qutebrowser qutebrowser Debian Ubuntu PyPI