{"action":"Upgrade qtnetworkauth-everywhere-src to 5.15.13-3 or later.","affected":[{"fixed":"5.15.13-3","introduced":"0"}],"component":"qtnetworkauth-everywhere-src","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:13","exploited":false,"fixed_versions":["5.15.13-3"],"id":"tcs_01M5NKKMGA2EB1C8PN862330VH","modified_at":"2026-09-15T09:03:12.791396041Z","published_at":"2024-05-18T21:15:47.673Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2024-36048","https://security-tracker.debian.org/tracker/CVE-2024-36048"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2024-36048#Debian:13/qtnetworkauth-everywhere-src","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2024-36048"}],"summary":"QAbstractOAuth in Qt Network Authorization in Qt before 5.15.17, 6.x before 6.2.13, 6.3.x through 6.5.x before 6.5.6, and 6.6.x through 6.7.x before 6.7.1 uses only the time to seed the PRNG, which ma"}