KDE Messagelib vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting KDE Messagelib: 1 record(s), with affected versions and fixes.
CVE-2025-69412
Low · 3.4
CWE-295 Dec 31, 2025
Improper Certificate Validation in KDE Messagelib
KDE messagelib before 25.11.90 ignores SSL errors for threatMatches:find in the Google Safe Browsing Lookup API (aka phishing API), which might allow spoofing of threat data. NOTE: this Lookup API is not contacted in the messagelib default configuration.