Todesktop Builder vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Todesktop Builder: 3 record(s), with affected versions and fixes.
cpe:2.3:a:todesktop:builder

CVE-2025-67231 Medium · 5.9 CWE-79 Jan 23, 2026

Cross-site Scripting (XSS) in Todesktop Builder

A reflected cross-site scripting (XSS) vulnerability in ToDesktop Builder v0.33.1 allows attackers to execute arbitrary code in the context of a user's browser via a crafted payload.

CVE-2025-67230 High · 7.1 CWE-276 Jan 23, 2026

Incorrect Default Permissions in Todesktop Builder

Improper permissions in the handler for the Custom URL Scheme in ToDesktop Builder v0.33.0 allows attackers with renderer-context access to invoke external protocol handlers without sufficient validation.

CVE-2025-67229 Critical · 9.8 CWE-295 Jan 23, 2026

Improper Certificate Validation in Todesktop Builder

An improper certificate validation vulnerability exists in ToDesktop Builder v0.32.1 This vulnerability allows an unauthenticated, on-path attacker to spoof backend responses by exploiting insufficient certificate validation.