libdiscover/backends/KNSBackend/KNSResource.cpp in KDE Discover before 5.21.3 automatically creates links to potentially dangerous URLs (that are neither https:// nor http://) based on the content of the store.kde.org web site. (5.18.7 is also a fixed version.)
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade discover | Aug 22, 2024 | Mar 20, 2021 |
| Debian | — | Upgrade plasma-discover | Jul 30, 2024 | Mar 20, 2021 |
| Ubuntu | — | Upgrade plasma-discover | Nov 19, 2024 | Mar 20, 2021 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub