CVE-2022-32265

MEDIUM 5.3CVE-2022-32265 · Published 03/06/2022 · updated 17/06/2026

In short

CVE-2022-32265 is a MEDIUM (CVSS 5.3) vulnerability affecting qdecoder (qdecoder project).
Chance of exploitation in the next 30 days (EPSS): 1.3%, higher than 71.3% of all vulnerabilities.
Fix: update to 12.1.0 or later.

Package	Affected versions	Patched versions
qdecoder qdecoder_project	`< 12.1.0`	`12.1.0`

qDecoder before 12.1.0 does not ensure that the percent character is followed by two hex digits for URL decoding.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.