Libzapojit

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:gnome:libzapojit:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorGnome (0ee6d85f-ce9a-5064-936c-231d12a60ad5)
ProductLibzapojit (79e40b64-5b90-5db7-94f4-dff3292339fe)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/libzapojit purl2cpe 2026-06-01 10:17:25.413689
pkg:deb/ubuntu/libzapojit purl2cpe 2026-06-01 10:17:25.413692
pkg:github/gnome/libzapojit purl2cpe 2026-06-01 10:17:25.413695
pkg:rpm/centos/libzapojit purl2cpe 2026-06-01 10:17:25.413697
pkg:rpm/fedora/libzapojit purl2cpe 2026-06-01 10:17:25.413700
pkg:rpm/opensuse/libzapojit purl2cpe 2026-06-01 10:17:25.413703

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-39360 vulnerable 2026-06-08 05:33:50.140422 Details available
In GNOME libzapojit through 0.0.3, zpj-skydrive.c does not enable TLS certificate verification on the SoupSessionSync objects it creates, leaving users vulnerable to network MITM attacks. NOTE: this is similar to CVE-2016-20011.
Published: 2021-08-22T18:46:40.000Z
Updated: 2024-08-04T02:06:42.431Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.