GDevelop vulnerabilities

CVEs whose affected-version data names the GDevelop package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-112303Medium· 4.3

today

GDevelop through 5.6.284 Cookie Leak via LocalFileDownloader Resource URLs

GDevelop desktop app through 5.6.284 contains a credential leak vulnerability that allows attackers to steal the gd_resource cookie by supplying attacker-controlled resource URLs in project files. Attackers can get victims to open a craf…

▾ SunlitGDevelop · GDevelopvia CVEORG