Vulnerabilities

TI-2025-41165 CVE-2025-67231 · GHSA-5cw4-84mj-w89x

A reflected cross-site scripting (XSS) vulnerability in ToDesktop Builder v0.33.1 allows…

LOW 26

A reflected cross-site scripting (XSS) vulnerability in ToDesktop Builder v0.33.1 allows attackers to execute arbitrary code in the context of a user's browser via a crafted payload.

CVSS 3.1MEDIUM 5.9 Network No auth User interaction EPSS 0.00292 Published 2026-01-23 No fix listed CWE-79

TI-2025-41164 CVE-2025-67230 · GHSA-w3pm-8qj7-7fq4

Improper permissions in the handler for the Custom URL Scheme in ToDesktop Builder…

LOW 33

Improper permissions in the handler for the Custom URL Scheme in ToDesktop Builder v0.33.0 allows attackers with renderer-context access to invoke external protocol handlers without sufficient validation.

CVSS 3.1HIGH 7.1 Network Low privileges User interaction EPSS 0.00245 Published 2026-01-23 No fix listed CWE-276

TI-2025-41163 CVE-2025-67229 · GHSA-9x5c-g8wh-rgrw

An improper certificate validation vulnerability exists in ToDesktop Builder v0.32.1 This…

MEDIUM 48

An improper certificate validation vulnerability exists in ToDesktop Builder v0.32.1 This vulnerability allows an unauthenticated, on-path attacker to spoof backend responses by exploiting insufficient certificate valida…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00266 Published 2026-01-23 No fix listed CWE-295

Vulnerabilities

Filters

A reflected cross-site scripting (XSS) vulnerability in ToDesktop Builder v0.33.1 allows…

Improper permissions in the handler for the Custom URL Scheme in ToDesktop Builder…

An improper certificate validation vulnerability exists in ToDesktop Builder v0.32.1 This…