Threats affecting pkg:maven/org.qtproject/qtbase

2 threats

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Low	1.8	EPSS <0.1%	CVE-2025-14575Qt · Uncontrolled Search Path Element Low1.8EPSS <0.1%2026-05-19CVE Database V5CVE-2025-14575 An Uncontrolled Search Path Element vulnerability in the OpenSSL TLS backend of Qt Network (qtbase) in Qt Qt Framework (Unix) allows a local attacker to load a rogue CA certificate as a trusted system authority via a crafted certificate file placed in the application's working directory. EPSS <0.1%Vulnerability CWE-427	CVE Database V5	2026-05-19
High	8.6	EPSS 0.5%	CVE-2024-39936qtbase · Time-of-check Time-of-use (TOCTOU) Race Condition High8.6EPSS 0.5%2024-07-04CVE Database V5CVE-2024-39936 An issue was discovered in HTTP2 in Qt before 5.15.18, 6.x before 6.2.13, 6.3.x through 6.5.x before 6.5.7, and 6.6.x through 6.7.x before 6.7.3. Code to make security-relevant decisions about an established connection may execute too early, because the encrypted() signal has not yet been emitted and processed.. EPSS 0.5%Vulnerability CWE-367	CVE Database V5	2024-07-04

Page 1 of 1