Approved changes feed: RSS · Atom

cpe:2.3:a:duckduckgo:duckduckgo:4.2.0:*:*:*:*:*:*:*

part: a version: 4.2.0 update: *

VendorDuckduckgo (6ade94ec-c976-5178-8a20-895f845f8e82)
ProductDuckduckgo (9865847d-b210-5780-9003-70267347f1eb)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/duckduckgo/duckduckgo purl2cpe 2026-06-01 10:13:40.553085

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-6849 vulnerable 2026-06-08 05:11:54.300548 Details available
In the WebRTC component in DuckDuckGo 4.2.0, after visiting a web site that attempts to gather complete client information (such as https://ip.voidsec.com), the browser can disclose a private IP address in a STUN request.
Published: 2018-04-01T18:00:00.000Z
Updated: 2024-08-05T06:17:15.825Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.