Total vulnerabilities in the database
An issue was discovered in Qt before 5.15.14, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.1. Qt Network incorrectly parses the strict-transport-security (HSTS) header, allowing unencrypted connections to be established, even when explicitly prohibited by the server. This happens if the case used for this header does not exactly match.
| Software | From | Fixed in |
|---|---|---|
| qt / qt | 6.3.0 | 6.5.1 |
| qt / qt | 6.0.0 | 6.2.9 |
| debian / debian_linux | 10.0 | 10.0.x |
| qt / qt | 5.9.0 | 5.15.14 |