GCVE - cpe:2.3:a:vareille:tinyfiledialogs:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:vareille:tinyfiledialogs:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Vareille (`01f9d375-056a-522f-b6d6-f6a7a057ffe8`)
Product	Tinyfiledialogs (`a3001ab0-a1b4-55d1-bec9-6b2a2a73f96c`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from purl2cpe mapping

PURL	Source	Last updated
`pkg:github/native-toolkit/libtinyfiledialogs`	purl2cpe	2026-06-01 10:16:05.138502
`pkg:sourceforge/tinyfiledialogs`	purl2cpe	2026-06-01 10:16:05.138504

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2023-47104`	vulnerable	2026-06-08 06:14:23.942554	Details available tinyfiledialogs (aka tiny file dialogs) before 3.15.0 allows shell metacharacters (such as a backquote or a dollar sign) in titles, messages, and other input data. NOTE: this issue exists because of an incomplete fix for CVE-2020-36767, which only considered single and double quote characters. Published: 2023-10-30T00:00:00.000Z Updated: 2024-09-09T20:34:10.445Z Open on db.gcve.eu Reference links https://github.com/servo/servo/issues/25498#issuecomment-703527082 https://sourceforge.net/p/tinyfiledialogs/code/ci/ac9f9f6d8cdf45ca8d9b4cf1f201ee472301e114/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-36767`	vulnerable	2026-06-08 05:25:49.567755	Details available tinyfiledialogs (aka tiny file dialogs) before 3.8.0 allows shell metacharacters in titles, messages, and other input data. Published: 2023-10-30T00:00:00.000Z Updated: 2024-09-09T19:59:56.895Z Open on db.gcve.eu Reference links https://github.com/servo/servo/issues/25498#issuecomment-703527082	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open this panel to browse, search, copy or download the JSON record.