Unrated
In Godot through 3.1, remote code execution is possible due to the deserialization policy not being applied correctly.
CVE-2019-10069
First seen on SecPulse
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2019-10069 godot Fixed in: 3.2-stable-1
References
- advisory github.com
- advisory godotengine.org