Gnome Librest vulnerabilities

2 CVEs affecting Gnome Librest, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-16615, published 2026-07-22.

More from Gnome.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2015-2675, published 2017-08-18. High severity, CVSS 7.5. EPSS: 3.5% chance of exploitation in the next 30 days. The OAuth implementation in librest before 0.7.93 incorrectly truncates the pointer returned by the rest_proxy_call_get_url function, which allows remote attackers to cause a denial of service…
• CVE-2026-16615, published 2026-07-22. Medium severity, CVSS 6.8. EPSS: 0.3% chance of exploitation in the next 30 days. A flaw was found in librest. The PKCE implementation for OAuth authorization uses the GRand function from the GLib API, a cryptographically insecure pseudo-random number generator. Because the…