xdg-dbus-proxy (Product): news timeline & CVEs

xdg-dbus-proxy 0.1.9 fixes sandbox escape CVE-2026-94422

xdg-dbus-proxy 0.1.9 patches sandbox escape CVE-2026-94422; every older release is vulnerable.

Simon McVittie announced on oss-security that xdg-dbus-proxy 0.1.9 fixes CVE-2026-94422, a sandbox escape. All versions older than 0.1.9 are vulnerable. The fix is documented in GitHub advisory GHSA-2cgv-pwcq-wvpq and the 0.1.9 release notes. The notice does not report active exploitation.

oss-securitySep 23, 15:10 UTC · 3d agoVulnerability 2 sources CVE-2026-94422

Re: xdg-dbus-proxy: GHSA-r7hp-698j-2h6c: broadcast message filtering bypass

xdg-dbus-proxy broadcast filtering bypass is now tracked as CVE-2026-93676.

Simon McVittie reported on oss-security that CVE-2026-93676 was assigned for a broadcast message filtering bypass in xdg-dbus-proxy, also tracked as GHSA-r7hp-698j-2h6c. The note only confirms the identifier and does not describe exploitation or patch details.

oss-securityupdated Sep 23, 15:10 UTC · 3d agofirst Sep 22, 21:58 UTC · 4d agoVulnerability 2 sources CVE-2026-93676

xdg-dbus-proxy

Timeline2 articles

Related CVEsby mentions

Appears with

xdg-dbus-proxy 0.1.9 fixes sandbox escape CVE-2026-94422

Re: xdg-dbus-proxy: GHSA-r7hp-698j-2h6c: broadcast message filtering bypass