PatchTheCVEgodot vulnerabilities and fixes
Recent CVEs affecting godot, with upgrade or downgrade steps. 2 tracked.
godot has 2 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 2. Most recent: 2019-05-31. Highest priority: CVE-2019-10069 (score 62/100).
- CVE-2019-10069 CRITICAL 9.8 UPGRADE In Godot through 3.1, remote code execution is possible due to the deserialization policy not being applied co
- CVE-2018-1000224 HIGH 7.5 UPGRADE Godot Engine version All versions prior to 2.1.5, all 3.0 versions prior to 3.0.6
FAQ
How do I fix godot vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is godot being exploited right now?
None of the tracked godot CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which godot CVE should I patch first?
CVE-2019-10069 currently ranks highest (62/100): In Godot through 3.1, remote code execution is possible due to the deserialization policy not being applied co.