Package · Ubuntu

xdg-utils

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Feed

Low 2.7

CVE-2025-52968

xdg-open in xdg-utils through 1.2.1 can send requests containing SameSite=Strict cookies, which can facilitate CSRF. (F…

Freedesktop xdg-utils xdg-utils xdg-utils Debian Ubuntu Azure Linux

Jun 23, 2025
High 7.4

CVE-2022-4055

When xdg-mail is configured to use thunderbird for mailto URLs, improper parsing of the URL can lead to additional head…

xdg-utils xdg-utils xdg-utils Debian Ubuntu Azure Linux

Nov 18, 2022
Unscored —

CVE-2020-27748

A flaw was found in the xdg-email component of xdg-utils-1.1.0-rc1 and newer. When handling mailto: URIs, xdg-email all…

xdg-utils xdg-utils xdg-utils Debian Ubuntu Azure Linux

Jun 1, 2021
Unscored —

CVE-2017-18266

The open_envvar function in xdg-open in xdg-utils before 1.1.3 does not validate strings before launching the program s…

xdg-utils xdg-utils Debian Ubuntu

May 10, 2018