CVE-2026-112303

The GDevelop desktop application (versions through 5.6.284 ) is vulnerable to a credential leak via the LocalFileDownloader resource URLs. The root cause is that the downloadLocalFile() function may send the gd_resource cookie to an external server when a user opens a crafted project containing a...