Problems while searching for a new upstream version
high
uscan had problems while searching for a new upstream version:
In watchfile debian/watch, reading webpage
https://github.com/flatpak/xdg-dbus-proxy/tags failed: 500 Can't connect to github.com:443 (Temporary failure in name resolution)
CVE-2026-94422:
An incorrect implementation of message filtering in xdg-dbus-proxy versions before 0.1.9 allows an attacker to bypass the intended message filtering on the D-Bus session bus by setting a reply serial number on non-reply messages. A malicious or compromised Flatpak app could use this to achieve arbitrary code execution outside its sandbox. xdg-dbus-proxy was designed to be part of the sandbox boundary for Flatpak, but it is released as a separate project and is sometimes used by other app frameworks such as Firejail.
Depends on packages which need a new maintainer
normal
The packages that xdg-dbus-proxy depends on which need a new maintainer are:
![[bug history graph]](https://qa.debian.org/data/bts/graphs/x/xdg-dbus-proxy.png){kind=link}