{"action":"Upgrade qtbase-opensource-src to 5.15.15+dfsg-6 or later.","affected":[{"fixed":"5.15.15+dfsg-6","introduced":"0"}],"component":"qtbase-opensource-src","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:14","exploited":false,"fixed_versions":["5.15.15+dfsg-6"],"id":"tcs_01M5NP1SBQS1M7B403ECCPDPWM","modified_at":"2026-09-01T20:05:54.682857645Z","published_at":"2025-06-02T09:15:21.493Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2025-5455","https://security-tracker.debian.org/tracker/CVE-2025-5455"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2025-5455#Debian:14/qtbase-opensource-src","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2025-5455"}],"summary":"An issue was found in the private API function qDecodeDataUrl() in QtCore, which is used in QTextDocument and QNetworkReply, and, potentially, in user code. If the function was called with malformed d"}