Approved changes feed: RSS · Atom

cpe:2.3:a:kde:kate:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorKde (d8ba08cf-7ec1-5504-a5b9-f8cfa50ca850)
ProductKate (19a313e5-dfe2-5f3d-ad2f-1ae32b56100a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/kate purl2cpe 2026-06-01 10:14:05.856359
pkg:deb/ubuntu/kate purl2cpe 2026-06-01 10:14:05.856362
pkg:github/kde/kate purl2cpe 2026-06-01 10:14:05.856365
pkg:rpm/fedora/kate purl2cpe 2026-06-01 10:14:05.856368
pkg:rpm/opensuse/kate purl2cpe 2026-06-01 10:14:05.856371

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-23853 vulnerable 2026-06-03 14:46:29.025408 Details available
The LSP (Language Server Protocol) plugin in KDE Kate before 21.12.2 and KTextEditor before 5.91.0 tries to execute the associated LSP server binary when opening a file of a given type. If this binary is absent from the PATH, it will try running the LSP server binary in the directory of the file that was just opened (due to a misunderstanding of the QProcess API, that was never intended). This can be an untrusted directory.
Published: 2022-02-11T00:00:00.000Z
Updated: 2024-08-03T03:51:45.993Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.