low3.4
CVE-2025-69412
KDE messagelib before 25.11.90 ignores SSL errors for threatMatches:find in the Google Safe Browsing Lookup API (aka phishing API), which might allow spoofing …
Impact
KDE messagelib before 25.11.90 ignores SSL errors for threatMatches:find in the Google Safe Browsing Lookup API (aka phishing API), which might allow spoofing of threat data. NOTE: this Lookup API is not contacted in the messagelib default configuration.
Affected products
| Product | Affected versions |
|---|---|
| KDE Messagelib | before 25.11.90 |
Versions were read from the advisory text. No structured product data has been published for this record yet.