| Bug | bookworm | trixie | forky | sid | Description |
|---|
| TEMP-1151742-165C56 | vulnerable | vulnerable (no DSA) | fixed | fixed | qbittorrent: unauthenticated memory exhaustion in the embedded tracker |
| TEMP-1151741-96F125 | vulnerable | vulnerable (no DSA) | fixed | fixed | qbittorrent: unsafe RSS and search-result URLs can execute JavaScript in WebUI |
| TEMP-1151740-4E18E1 | vulnerable | vulnerable (no DSA) | fixed | fixed | qbittorrent: malicious RSS entries can trigger arbitrary local file deletion |
| TEMP-1151739-8C8D2B | vulnerable | vulnerable (no DSA) | fixed | fixed | qbittorrent: WebUI authentication bypass via spoofed X-Forwarded-For |
| TEMP-1151738-0D561B | vulnerable | vulnerable (no DSA) | fixed | fixed | qbittorrent: insecure dynamic DNS IP discovery allows hostname redirection |
| CVE-2025-54310 | vulnerable (no DSA) | fixed | fixed | fixed | qBittorrent before 5.1.2 does not prevent access to a local file that ... |
| CVE-2024-51774 | vulnerable (no DSA) | fixed | fixed | fixed | qBittorrent before 5.0.1 proceeds with use of https URLs even after ce ... |