duckduckgo/Android

duckduckgo/Android

GitHubGitHub
GitHubgithub.com
play.google.complay.google.com
Releases2.36K
Frequency1 day 9 hours
Last Release
Stars4.7K
DuckDuckGo Android App
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2020-15502↗
7.5 HIGH5 MEDIUM

The DuckDuckGo application through 5.58.0 for Android, and through 7.47.1.0 for iOS, sends hostnames of visited web sites within HTTPS .ico requests to servers in the duckduckgo.com domain, which might make visit data available temporarily at a Potentially Unwanted Endpoint. NOTE: the vendor has stated "the favicon service adheres to our strict privacy policy.