Skip to content
Heist/ feed
Back to feed
Critical

Security advisory

Type: advisorySources: OSVCVE: CVE-2021-32563

An issue was discovered in Thunar before 4.16.7 and 4.17.x before 4.17.2. When called with a regular file as a command-line argument, it delegates to a different program (based on the file type) without user confirmation. This could be used to achieve code execution.

Products
Not specified
Affected versions
Not specified
Fixed versions
Not specified
CVEs
CVE-2021-32563
Confirmed fixed CVEs
Not specified
Updated in this feed
1 Nov 2026, 09:27 UTC · Revision 1

Source evidence

CVE-2021-32563

core-osv · Original source

Published 11 May 2021, 05:15 UTC

An issue was discovered in Thunar before 4.16.7 and 4.17.x before 4.17.2. When called with a regular file as a command-line argument, it delegates to a different program (based on the file type) without user confirmation. This could be used to achieve code execution.

osv:CVE-2021-32563
Complete source record
{
  "id": "20f9f6c54c17bed636d41964c588e75696c2d4a6afc76d0eeedb15f700c7f7b1",
  "url": "https://osv.dev/vulnerability/CVE-2021-32563",
  "method": "structured",
  "payload": {
    "kind": "advisory",
    "title": "CVE-2021-32563",
    "summary": "An issue was discovered in Thunar before 4.16.7 and 4.17.x before 4.17.2. When called with a regular file as a command-line argument, it delegates to a different program (based on the file type) without user confirmation. This could be used to achieve code execution.",
    "evidence": "osv:CVE-2021-32563",
    "products": [],
    "severity": "critical",
    "structured": {
      "id": "CVE-2021-32563",
      "aliases": [
        "CVE-2021-32563"
      ],
      "metrics": [
        {
          "type": "CVSS_V3",
          "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "affected": [
        {
          "ranges": [
            {
              "repo": "https://github.com/xfce-mirror/thunar",
              "type": "GIT",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "13b837945b35ab48a2da4e54657169d0453e5e06"
                },
                {
                  "introduced": "757ee923658663dc85d3b1760321236c8b68dca1"
                },
                {
                  "fixed": "7f353c925ee539e62bfb64e5b32464915f2f3753"
                }
              ],
              "database_specific": {
                "extracted_events": [
                  {
                    "cpe": "cpe:2.3:a:xfce:thunar:*:*:*:*:*:*:*:*",
                    "range": [
                      {
                        "introduced": "0"
                      },
                      {
                        "fixed": "4.16.7"
                      }
                    ],
                    "source": "CPE_RANGE"
                  },
                  {
                    "cpe": "cpe:2.3:a:xfce:thunar:*:*:*:*:*:*:*:*",
                    "range": [
                      {
                        "introduced": "4.17.0"
                      },
                      {
                        "fixed": "4.17.2"
                      }
                    ],
                    "source": "CPE_RANGE"
                  }
                ]
              }
            }
          ],
          "versions": [
            "thunar-4.16.6",
            "thunar-4.17.1",
            "thunar-4.16.5",
            "thunar-4.16.4",
            "thunar-4.16.3",
            "thunar-4.17.0",
            "thunar-4.16.2",
            "thunar-4.16.1",
            "thunar-4.16.0",
            "xfce-4.16pre2",
            "thunar-4.15.3",
            "xfce-4.16pre1",
            "thunar-4.15.2",
            "thunar-4.15.1",
            "thunar-4.15.0",
            "thunar-1.8.1",
            "thunar-1.8.0",
            "thunar-1.7.2",
            "thunar-1.7.1",
            "thunar-1.7.0",
            "thunar-1.6.12",
            "thunar-1.6.11",
            "thunar-1.6.10",
            "thunar-1.6.9",
            "thunar-1.6.8",
            "thunar-1.6.7",
            "thunar-1.6.6",
            "thunar-1.6.5",
            "thunar-1.6.4",
            "thunar-1.6.3",
            "thunar-1.6.2",
            "thunar-1.6.1",
            "thunar-1.6.0",
            "thunar-1.5.3",
            "thunar-1.5.2",
            "thunar-1.5.1",
            "thunar-1.5.0",
            "thunar-1.4.0",
            "thunar-1.3.2",
            "thunar-1.3.1",
            "thunar-1.3.0",
            "thunar-1.2.0",
            "thunar-1.1.6",
            "thunar-1.1.5",
            "thunar-1.1.4",
            "thunar-1.1.3",
            "thunar-1.1.2",
            "thunar-1.1.1",
            "thunar-1.1.0",
            "thunar-1.0.1",
            "thunar-0.9.99.1",
            "xfce-4.6beta3",
            "thunar-0.9.93",
            "xfce-4.6beta2",
            "thunar-0.9.92",
            "xfce-4.6beta1",
            "thunar-0.9.91",
            "xfce-4.6alpha",
            "thunar-0.9.80",
            "xfce-4.4.2",
            "thunar-0.9.0",
            "xfce-4.4beta2",
            "thunar-0.3.2beta2",
            "xfce-4.4beta1",
            "thunar-0.3.0beta1"
          ],
          "database_specific": {
            "source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-32563.json"
          }
        },
        {
          "ranges": [
            {
              "repo": "https://gitlab.xfce.org/xfce/thunar",
              "type": "GIT",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "1b85b96ebf7cb9bf6a3ddf1acee7643643fdf92d"
                },
                {
                  "fixed": "3b54d9d7dbd7fd16235e2141c43a7f18718f5664"
                },
                {
                  "fixed": "9165a61f95e43cc0b5abf9b98eee2818a0191e0b"
                }
              ],
              "database_specific": {
                "extracted_events": [
                  {
                    "range": [
                      {
                        "fixed": "1b85b96ebf7cb9bf6a3ddf1acee7643643fdf92d"
                      }
                    ],
                    "source": "REFERENCES_COMMIT"
                  },
                  {
                    "range": [
                      {
                        "fixed": "3b54d9d7dbd7fd16235e2141c43a7f18718f5664"
                      }
                    ],
                    "source": "REFERENCES_COMMIT"
                  },
                  {
                    "range": [
                      {
                        "fixed": "9165a61f95e43cc0b5abf9b98eee2818a0191e0b"
                      }
                    ],
                    "source": "REFERENCES_COMMIT"
                  }
                ]
              }
            }
          ],
          "versions": [
            "thunar-4.17.1",
            "thunar-4.17.0",
            "thunar-4.16.0",
            "xfce-4.16pre2",
            "thunar-4.15.3",
            "thunar-1.8.16",
            "xfce-4.16pre1",
            "thunar-4.15.2",
            "thunar-4.15.1",
            "thunar-4.15.0",
            "thunar-1.8.15",
            "thunar-1.8.14",
            "thunar-1.8.13",
            "thunar-1.8.12",
            "thunar-1.8.11",
            "thunar-1.8.10",
            "xfce-4.14.0",
            "thunar-1.8.9",
            "xfce-4.14pre3",
            "thunar-1.8.8",
            "xfce-4.14pre2",
            "thunar-1.8.7",
            "xfce-4.14pre1",
            "thunar-1.8.6",
            "thunar-1.8.5",
            "thunar-1.8.4",
            "thunar-1.8.3",
            "thunar-1.8.2",
            "thunar-1.8.1",
            "thunar-1.8.0",
            "thunar-1.7.2",
            "thunar-1.7.1",
            "thunar-1.7.0",
            "thunar-1.6.12",
            "thunar-1.6.11",
            "thunar-1.6.10",
            "thunar-1.6.9",
            "thunar-1.6.8",
            "thunar-1.6.7",
            "thunar-1.6.6",
            "thunar-1.6.5",
            "thunar-1.6.4",
            "thunar-1.6.3",
            "thunar-1.6.2",
            "thunar-1.6.1",
            "thunar-1.6.0",
            "thunar-1.5.3",
            "thunar-1.5.2",
            "thunar-1.5.1",
            "thunar-1.5.0",
            "thunar-1.4.0",
            "thunar-1.3.2",
            "thunar-1.3.1",
            "thunar-1.3.0",
            "thunar-1.2.0",
            "thunar-1.1.6",
            "thunar-1.1.5",
            "thunar-1.1.4",
            "thunar-1.1.3",
            "thunar-1.1.2",
            "thunar-1.1.1",
            "thunar-1.1.0",
            "thunar-1.0.1",
            "thunar-0.9.99.1",
            "xfce-4.6beta3",
            "thunar-0.9.93",
            "xfce-4.6beta2",
            "thunar-0.9.92",
            "xfce-4.6beta1",
            "thunar-0.9.91",
            "xfce-4.6alpha",
            "thunar-0.9.80",
            "xfce-4.4.2",
            "thunar-0.9.0",
            "xfce-4.4beta2",
            "thunar-0.3.2beta2",
            "xfce-4.4beta1",
            "thunar-0.3.0beta1"
          ],
          "database_specific": {
            "source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-32563.json",
            "vanir_signatures": [
              {
                "id": "CVE-2021-32563-101171c6",
                "digest": {
                  "length": 1117,
                  "function_hash": "76453521844426154463468593598021274668"
                },
                "source": "https://gitlab.xfce.org/xfce/thunar@9165a61f95e43cc0b5abf9b98eee2818a0191e0b",
                "target": {
                  "file": "thunar/thunar-application.c",
                  "function": "thunar_application_process_files_finish"
                },
                "deprecated": false,
                "signature_type": "Function",
                "signature_version": "v1"
              },
              {
                "id": "CVE-2021-32563-1df0ae1b",
                "digest": {
                  "length": 872,
                  "function_hash": "193458808684422267123343110460523055664"
                },
                "source": "https://gitlab.xfce.org/xfce/thunar@1b85b96ebf7cb9bf6a3ddf1acee7643643fdf92d",
                "target": {
                  "file": "thunar/thunar-dbus-service.c",
                  "function": "thunar_dbus_service_launch_files"
                },
                "deprecated": false,
                "signature_type": "Function",
                "signature_version": "v1",
                "match_only_versions": [
                  "thunar-0.3.0beta1",
                  "thunar-0.3.2beta2",
                  "thunar-0.9.0",
                  "thunar-0.9.80",
                  "thunar-0.9.91",
                  "thunar-0.9.92",
                  "thunar-0.9.93",
                  "thunar-0.9.99.1",
                  "thunar-1.0.1",
                  "thunar-1.1.0",
                  "thunar-1.1.1",
                  "thunar-1.1.2",
                  "thunar-1.1.3",
                  "thunar-1.1.4",
                  "thunar-1.1.5",
                  "thunar-1.1.6",
                  "thunar-1.2.0",
                  "thunar-1.3.0",
                  "thunar-1.3.1",
                  "thunar-1.3.2",
                  "thunar-1.4.0",
                  "thunar-1.5.0",
                  "thunar-1.5.1",
                  "thunar-1.5.2",
                  "thunar-1.5.3",
                  "thunar-1.6.0",
                  "thunar-1.6.1",
                  "thunar-1.6.10",
                  "thunar-1.6.11",
                  "thunar-1.6.12",
                  "thunar-1.6.2",
                  "thunar-1.6.3",
                  "thunar-1.6.4",
                  "thunar-1.6.5",
                  "thunar-1.6.6",
                  "thunar-1.6.7",
                  "thunar-1.6.8",
                  "thunar-1.6.9",
                  "thunar-1.7.0",
                  "thunar-1.7.1",
                  "thunar-1.7.2",
                  "thunar-1.8.0",
                  "thunar-1.8.1",
                  "thunar-1.8.10",
                  "thunar-1.8.11",
                  "thunar-1.8.12",
                  "thunar-1.8.13",
                  "thunar-1.8.14",
                  "thunar-1.8.15",
                  "thunar-1.8.16",
                  "thunar-1.8.2",
                  "thunar-1.8.3",
                  "thunar-1.8.4",
                  "thunar-1.8.5",
                  "thunar-1.8.6",
                  "thunar-1.8.7",
                  "thunar-1.8.8",
                  "thunar-1.8.9",
                  "thunar-4.15.0",
                  "thunar-4.15.1",
                  "thunar-4.15.2",
                  "thunar-4.15.3",
                  "thunar-4.16.0",
                  "thunar-4.17.0",
                  "thunar-4.17.1",
                  "xfce-4.14.0",
                  "xfce-4.14pre1",
                  "xfce-4.14pre2",
                  "xfce-4.14pre3",
                  "xfce-4.16pre1",
                  "xfce-4.16pre2",
                  "xfce-4.4.2",
                  "xfce-4.4beta1",
                  "xfce-4.4beta2",
                  "xfce-4.6alpha",
                  "xfce-4.6beta1",
                  "xfce-4.6beta2",
                  "xfce-4.6beta3"
                ]
              },
              {
                "id": "CVE-2021-32563-3371b1be",
                "digest": {
                  "length": 872,
                  "function_hash": "193458808684422267123343110460523055664"
                },
                "source": "https://gitlab.xfce.org/xfce/thunar@3b54d9d7dbd7fd16235e2141c43a7f18718f5664",
                "target": {
                  "file": "thunar/thunar-dbus-service.c",
                  "function": "thunar_dbus_service_launch_files"
                },
                "deprecated": false,
                "signature_type": "Function",
                "signature_version": "v1",
                "match_only_versions": [
                  "thunar-0.3.0beta1",
                  "thunar-0.3.2beta2",
                  "thunar-0.9.0",
                  "thunar-0.9.80",
                  "thunar-0.9.91",
                  "thunar-0.9.92",
                  "thunar-0.9.93",
                  "thunar-0.9.99.1",
                  "thunar-1.0.1",
                  "thunar-1.1.0",
                  "thunar-1.1.1",
                  "thunar-1.1.2",
                  "thunar-1.1.3",
                  "thunar-1.1.4",
                  "thunar-1.1.5",
                  "thunar-1.1.6",
                  "thunar-1.2.0",
                  "thunar-1.3.0",
                  "thunar-1.3.1",
                  "thunar-1.3.2",
                  "thunar-1.4.0",
                  "thunar-1.5.0",
                  "thunar-1.5.1",
                  "thunar-1.5.2",
                  "thunar-1.5.3",
                  "thunar-1.6.0",
                  "thunar-1.6.1",
                  "thunar-1.6.10",
                  "thunar-1.6.11",
                  "thunar-1.6.12",
                  "thunar-1.6.2",
                  "thunar-1.6.3",
                  "thunar-1.6.4",
                  "thunar-1.6.5",
                  "thunar-1.6.6",
                  "thunar-1.6.7",
                  "thunar-1.6.8",
                  "thunar-1.6.9",
                  "thunar-1.7.0",
                  "thunar-1.7.1",
                  "thunar-1.7.2",
                  "thunar-1.8.0",
                  "thunar-1.8.1",
                  "thunar-1.8.10",
                  "thunar-1.8.11",
                  "thunar-1.8.12",
                  "thunar-1.8.13",
                  "thunar-1.8.14",
                  "thunar-1.8.15",
                  "thunar-1.8.16",
                  "thunar-1.8.2",
                  "thunar-1.8.3",
                  "thunar-1.8.4",
                  "thunar-1.8.5",
                  "thunar-1.8.6",
                  "thunar-1.8.7",
                  "thunar-1.8.8",
                  "thunar-1.8.9",
                  "thunar-4.15.0",
                  "thunar-4.15.1",
                  "thunar-4.15.2",
                  "thunar-4.15.3",
                  "thunar-4.16.0",
                  "thunar-4.17.0",
                  "thunar-4.17.1",
                  "xfce-4.14.0",
                  "xfce-4.14pre1",
                  "xfce-4.14pre2",
                  "xfce-4.14pre3",
                  "xfce-4.16pre1",
                  "xfce-4.16pre2",
                  "xfce-4.4.2",
                  "xfce-4.4beta1",
                  "xfce-4.4beta2",
                  "xfce-4.6alpha",
                  "xfce-4.6beta1",
                  "xfce-4.6beta2",
                  "xfce-4.6beta3"
                ]
              },
              {
                "id": "CVE-2021-32563-42a80165",
                "digest": {
                  "threshold": 0.9,
                  "line_hashes": [
                    "99865753861372286741297302913382354915",
                    "247622726720538761819007825338052618403",
                    "176707885454668556170807645085737497280",
                    "333139024330446761343571746633445783416",
                    "146933908393969737615666454578684566522",
                    "200950094597740713280463560507298461842",
                    "53157523538990916355912828241457075199",
                    "111062599924806412650171855414553199827",
                    "325574395854969106349081343904029325414",
                    "96280369011074423462049685733203586973",
                    "95175919934903627722799744816487549256",
                    "87979455723892921382754459728731431894",
                    "211815047354901012973875091234101483548",
                    "320651336846753288642916734169432988645",
                    "181099522359467315620313745910512897711",
                    "153994052584897464719651028656804608749",
                    "109686166458609463385780913158710092336",
                    "47344089737884774703593204193646799146",
                    "100033262815061095203185496210447605238",
                    "270834495830842206512636738675756809517",
                    "78280308885520139326351024274231693315",
                    "24143829151470514115686587440494546578",
                    "162963469958582670132263380745055037439",
                    "323470614842269169400092986155997793683",
                    "76297322711891696412634719653849231140",
                    "313985901390170542829464902400940513537",
                    "226689051052781581000688254084198218685",
                    "250072494023561774963418071710018025597",
                    "134074542978424833109212619914329119633",
                    "204244619100719419585979787763591942176",
                    "93073831432092438747287437076990281853",
                    "222306724715024403879775227841098005366",
                    "126753208052616772965924041059652513292",
                    "299190834713215887819496170143625796803",
                    "43669644444511266314034110939201566121",
                    "329597757202746072060154039748659550011",
                    "8589464569689314626628195546958959490",
                    "224006342155471841587369911354457484501",
                    "268817342966736802396788422819508424690",
                    "65251134301491786359188187833077704704",
                    "218734824882458718720399157212612433067",
                    "236608988130168814103789507423271987286",
                    "264605666031778543864186310244680799551",
                    "328786809375787067547117669737535599134",
                    "248309274974212285512233078256133398883",
                    "2091267552891035950676508740904196090",
                    "157447081540793957148148791309110554724",
                    "185128742574355327423600561785971947229",
                    "152323619305930788114651512847058784937",
                    "74682958876486458854402065804292363417",
                    "241829157896393090932505305535412264887",
                    "200044527732749026347057920628696504716",
                    "277408563712604401407955732683884191104"
                  ]
                },
                "source": "https://gitlab.xfce.org/xfce/thunar@3b54d9d7dbd7fd16235e2141c43a7f18718f5664",
                "target": {
                  "file": "thunar/thunar-application.c"
                },
                "deprecated": false,
                "signature_type": "Line",
                "signature_version": "v1",
                "match_only_versions": [
                  "thunar-0.3.0beta1",
                  "thunar-0.3.2beta2",
                  "thunar-0.9.0",
                  "thunar-0.9.80",
                  "thunar-0.9.91",
                  "thunar-0.9.92",
                  "thunar-0.9.93",
                  "thunar-0.9.99.1",
                  "thunar-1.0.1",
                  "thunar-1.1.0",
                  "thunar-1.1.1",
                  "thunar-1.1.2",
                  "thunar-1.1.3",
                  "thunar-1.1.4",
                  "thunar-1.1.5",
                  "thunar-1.1.6",
                  "thunar-1.2.0",
                  "thunar-1.3.0",
                  "thunar-1.3.1",
                  "thunar-1.3.2",
                  "thunar-1.4.0",
                  "thunar-1.5.0",
                  "thunar-1.5.1",
                  "thunar-1.5.2",
                  "thunar-1.5.3",
                  "thunar-1.6.0",
                  "thunar-1.6.1",
                  "thunar-1.6.10",
                  "thunar-1.6.11",
                  "thunar-1.6.12",
                  "thunar-1.6.2",
                  "thunar-1.6.3",
                  "thunar-1.6.4",
                  "thunar-1.6.5",
                  "thunar-1.6.6",
                  "thunar-1.6.7",
                  "thunar-1.6.8",
                  "thunar-1.6.9",
                  "thunar-1.7.0",
                  "thunar-1.7.1",
                  "thunar-1.7.2",
                  "thunar-1.8.0",
                  "thunar-1.8.1",
                  "thunar-1.8.10",
                  "thunar-1.8.11",
                  "thunar-1.8.12",
                  "thunar-1.8.13",
                  "thunar-1.8.14",
                  "thunar-1.8.15",
                  "thunar-1.8.16",
                  "thunar-1.8.2",
                  "thunar-1.8.3",
                  "thunar-1.8.4",
                  "thunar-1.8.5",
                  "thunar-1.8.6",
                  "thunar-1.8.7",
                  "thunar-1.8.8",
                  "thunar-1.8.9",
                  "thunar-4.15.0",
                  "thunar-4.15.1",
                  "thunar-4.15.2",
                  "thunar-4.15.3",
                  "thunar-4.16.0",
                  "thunar-4.17.0",
                  "thunar-4.17.1",
                  "xfce-4.14.0",
                  "xfce-4.14pre1",
                  "xfce-4.14pre2",
                  "xfce-4.14pre3",
                  "xfce-4.16pre1",
                  "xfce-4.16pre2",
                  "xfce-4.4.2",
                  "xfce-4.4beta1",
                  "xfce-4.4beta2",
                  "xfce-4.6alpha",
                  "xfce-4.6beta1",
                  "xfce-4.6beta2",
                  "xfce-4.6beta3"
                ]
              },
              {
                "id": "CVE-2021-32563-4e7c6dae",
                "digest": {
                  "threshold": 0.9,
                  "line_hashes": [
                    "99865753861372286741297302913382354915",
                    "247622726720538761819007825338052618403",
                    "176707885454668556170807645085737497280",
                    "333139024330446761343571746633445783416",
                    "146933908393969737615666454578684566522",
                    "200950094597740713280463560507298461842",
                    "53157523538990916355912828241457075199",
                    "111062599924806412650171855414553199827",
                    "325574395854969106349081343904029325414",
                    "96280369011074423462049685733203586973",
                    "95175919934903627722799744816487549256",
                    "87979455723892921382754459728731431894",
                    "211815047354901012973875091234101483548",
                    "320651336846753288642916734169432988645",
                    "181099522359467315620313745910512897711",
                    "153994052584897464719651028656804608749",
                    "109686166458609463385780913158710092336",
                    "47344089737884774703593204193646799146",
                    "100033262815061095203185496210447605238",
                    "270834495830842206512636738675756809517",
                    "78280308885520139326351024274231693315",
                    "24143829151470514115686587440494546578",
                    "162963469958582670132263380745055037439",
                    "323470614842269169400092986155997793683",
                    "76297322711891696412634719653849231140",
                    "313985901390170542829464902400940513537",
                    "226689051052781581000688254084198218685",
                    "250072494023561774963418071710018025597",
                    "134074542978424833109212619914329119633",
                    "204244619100719419585979787763591942176",
                    "93073831432092438747287437076990281853",
                    "222306724715024403879775227841098005366",
                    "126753208052616772965924041059652513292",
                    "299190834713215887819496170143625796803",
                    "43669644444511266314034110939201566121",
                    "217846621016225848485072870713498074044",
                    "64660158412193811085918561022236540670",
                    "181899418999702034230534458880337942005",
                    "43894642237672623045404286098122510699",
                    "65251134301491786359188187833077704704",
                    "218734824882458718720399157212612433067",
                    "236608988130168814103789507423271987286",
                    "264605666031778543864186310244680799551",
                    "328786809375787067547117669737535599134",
                    "248309274974212285512233078256133398883",
                    "2091267552891035950676508740904196090",
                    "157447081540793957148148791309110554724",
                    "185128742574355327423600561785971947229",
                    "152323619305930788114651512847058784937",
                    "74682958876486458854402065804292363417",
                    "241829157896393090932505305535412264887",
                    "200044527732749026347057920628696504716",
                    "277408563712604401407955732683884191104"
                  ]
                },
                "source": "https://gitlab.xfce.org/xfce/thunar@1b85b96ebf7cb9bf6a3ddf1acee7643643fdf92d",
                "target": {
                  "file": "thunar/thunar-application.c"
                },
                "deprecated": false,
                "signature_type": "Line",
                "signature_version": "v1",
                "match_only_versions": [
                  "thunar-0.3.0beta1",
                  "thunar-0.3.2beta2",
                  "thunar-0.9.0",
                  "thunar-0.9.80",
                  "thunar-0.9.91",
                  "thunar-0.9.92",
                  "thunar-0.9.93",
                  "thunar-0.9.99.1",
                  "thunar-1.0.1",
                  "thunar-1.1.0",
                  "thunar-1.1.1",
                  "thunar-1.1.2",
                  "thunar-1.1.3",
                  "thunar-1.1.4",
                  "thunar-1.1.5",
                  "thunar-1.1.6",
                  "thunar-1.2.0",
                  "thunar-1.3.0",
                  "thunar-1.3.1",
                  "thunar-1.3.2",
                  "thunar-1.4.0",
                  "thunar-1.5.0",
                  "thunar-1.5.1",
                  "thunar-1.5.2",
                  "thunar-1.5.3",
                  "thunar-1.6.0",
                  "thunar-1.6.1",
                  "thunar-1.6.10",
                  "thunar-1.6.11",
                  "thunar-1.6.12",
                  "thunar-1.6.2",
                  "thunar-1.6.3",
                  "thunar-1.6.4",
                  "thunar-1.6.5",
                  "thunar-1.6.6",
                  "thunar-1.6.7",
                  "thunar-1.6.8",
                  "thunar-1.6.9",
                  "thunar-1.7.0",
                  "thunar-1.7.1",
                  "thunar-1.7.2",
                  "thunar-1.8.0",
                  "thunar-1.8.1",
                  "thunar-1.8.10",
                  "thunar-1.8.11",
                  "thunar-1.8.12",
                  "thunar-1.8.13",
                  "thunar-1.8.14",
                  "thunar-1.8.15",
                  "thunar-1.8.16",
                  "thunar-1.8.2",
                  "thunar-1.8.3",
                  "thunar-1.8.4",
                  "thunar-1.8.5",
                  "thunar-1.8.6",
                  "thunar-1.8.7",
                  "thunar-1.8.8",
                  "thunar-1.8.9",
                  "thunar-4.15.0",
                  "thunar-4.15.1",
                  "thunar-4.15.2",
                  "thunar-4.15.3",
                  "thunar-4.16.0",
                  "thunar-4.17.0",
                  "thunar-4.17.1",
                  "xfce-4.14.0",
                  "xfce-4.14pre1",
                  "xfce-4.14pre2",
                  "xfce-4.14pre3",
                  "xfce-4.16pre1",
                  "xfce-4.16pre2",
                  "xfce-4.4.2",
                  "xfce-4.4beta1",
                  "xfce-4.4beta2",
                  "xfce-4.6alpha",
                  "xfce-4.6beta1",
                  "xfce-4.6beta2",
                  "xfce-4.6beta3"
                ]
              },
              {
                "id": "CVE-2021-32563-673269cd",
                "digest": {
                  "length": 1227,
                  "function_hash": "68292435232507658122657591857538863550"
                },
                "source": "https://gitlab.xfce.org/xfce/thunar@3b54d9d7dbd7fd16235e2141c43a7f18718f5664",
                "target": {
                  "file": "thunar/thunar-application.c",
                  "function": "thunar_application_command_line"
                },
                "deprecated": false,
                "signature_type": "Function",
                "signature_version": "v1",
                "match_only_versions": [
                  "thunar-0.3.0beta1",
                  "thunar-0.3.2beta2",
                  "thunar-0.9.0",
                  "thunar-0.9.80",
                  "thunar-0.9.91",
                  "thunar-0.9.92",
                  "thunar-0.9.93",
                  "thunar-0.9.99.1",
                  "thunar-1.0.1",
                  "thunar-1.1.0",
                  "thunar-1.1.1",
                  "thunar-1.1.2",
                  "thunar-1.1.3",
                  "thunar-1.1.4",
                  "thunar-1.1.5",
                  "thunar-1.1.6",
                  "thunar-1.2.0",
                  "thunar-1.3.0",
                  "thunar-1.3.1",
                  "thunar-1.3.2",
                  "thunar-1.4.0",
                  "thunar-1.5.0",
                  "thunar-1.5.1",
                  "thunar-1.5.2",
                  "thunar-1.5.3",
                  "thunar-1.6.0",
                  "thunar-1.6.1",
                  "thunar-1.6.10",
                  "thunar-1.6.11",
                  "thunar-1.6.12",
                  "thunar-1.6.2",
                  "thunar-1.6.3",
                  "thunar-1.6.4",
                  "thunar-1.6.5",
                  "thunar-1.6.6",
                  "thunar-1.6.7",
                  "thunar-1.6.8",
                  "thunar-1.6.9",
                  "thunar-1.7.0",
                  "thunar-1.7.1",
                  "thunar-1.7.2",
                  "thunar-1.8.0",
                  "thunar-1.8.1",
                  "thunar-1.8.10",
                  "thunar-1.8.11",
                  "thunar-1.8.12",
                  "thunar-1.8.13",
                  "thunar-1.8.14",
                  "thunar-1.8.15",
                  "thunar-1.8.16",
                  "thunar-1.8.2",
                  "thunar-1.8.3",
                  "thunar-1.8.4",
                  "thunar-1.8.5",
                  "thunar-1.8.6",
                  "thunar-1.8.7",
                  "thunar-1.8.8",
                  "thunar-1.8.9",
                  "thunar-4.15.0",
                  "thunar-4.15.1",
                  "thunar-4.15.2",
                  "thunar-4.15.3",
                  "thunar-4.16.0",
                  "thunar-4.17.0",
                  "thunar-4.17.1",
                  "xfce-4.14.0",
                  "xfce-4.14pre1",
                  "xfce-4.14pre2",
                  "xfce-4.14pre3",
                  "xfce-4.16pre1",
                  "xfce-4.16pre2",
                  "xfce-4.4.2",
                  "xfce-4.4beta1",
                  "xfce-4.4beta2",
                  "xfce-4.6alpha",
                  "xfce-4.6beta1",
                  "xfce-4.6beta2",
                  "xfce-4.6beta3"
                ]
              },
              {
                "id": "CVE-2021-32563-6bc3037f",
                "digest": {
                  "threshold": 0.9,
                  "line_hashes": [
                    "333741236351249368640136793175355211632",
                    "196023527416500479017541562811996078200",
                    "312149587464661582791396048727543242774",
                    "82789431063833627206592324110022651623"
                  ]
                },
                "source": "https://gitlab.xfce.org/xfce/thunar@3b54d9d7dbd7fd16235e2141c43a7f18718f5664",
                "target": {
                  "file": "thunar/thunar-dbus-service.c"
                },
                "deprecated": false,
                "signature_type": "Line",
                "signature_version": "v1",
                "match_only_versions": [
                  "thunar-0.3.0beta1",
                  "thunar-0.3.2beta2",
                  "thunar-0.9.0",
                  "thunar-0.9.80",
                  "thunar-0.9.91",
                  "thunar-0.9.92",
                  "thunar-0.9.93",
                  "thunar-0.9.99.1",
                  "thunar-1.0.1",
                  "thunar-1.1.0",
                  "thunar-1.1.1",
                  "thunar-1.1.2",
                  "thunar-1.1.3",
                  "thunar-1.1.4",
                  "thunar-1.1.5",
                  "thunar-1.1.6",
                  "thunar-1.2.0",
                  "thunar-1.3.0",
                  "thunar-1.3.1",
                  "thunar-1.3.2",
                  "thunar-1.4.0",
                  "thunar-1.5.0",
                  "thunar-1.5.1",
                  "thunar-1.5.2",
                  "thunar-1.5.3",
                  "thunar-1.6.0",
                  "thunar-1.6.1",
                  "thunar-1.6.10",
                  "thunar-1.6.11",
                  "thunar-1.6.12",
                  "thunar-1.6.2",
                  "thunar-1.6.3",
                  "thunar-1.6.4",
                  "thunar-1.6.5",
                  "thunar-1.6.6",
                  "thunar-1.6.7",
                  "thunar-1.6.8",
                  "thunar-1.6.9",
                  "thunar-1.7.0",
                  "thunar-1.7.1",
                  "thunar-1.7.2",
                  "thunar-1.8.0",
                  "thunar-1.8.1",
                  "thunar-1.8.10",
                  "thunar-1.8.11",
                  "thunar-1.8.12",
                  "thunar-1.8.13",
                  "thunar-1.8.14",
                  "thunar-1.8.15",
                  "thunar-1.8.16",
                  "thunar-1.8.2",
                  "thunar-1.8.3",
                  "thunar-1.8.4",
                  "thunar-1.8.5",
                  "thunar-1.8.6",
                  "thunar-1.8.7",
                  "thunar-1.8.8",
                  "thunar-1.8.9",
                  "thunar-4.15.0",
                  "thunar-4.15.1",
                  "thunar-4.15.2",
                  "thunar-4.15.3",
                  "thunar-4.16.0",
                  "thunar-4.17.0",
                  "thunar-4.17.1",
                  "xfce-4.14.0",
                  "xfce-4.14pre1",
                  "xfce-4.14pre2",
                  "xfce-4.14pre3",
                  "xfce-4.16pre1",
                  "xfce-4.16pre2",
                  "xfce-4.4.2",
                  "xfce-4.4beta1",
                  "xfce-4.4beta2",
                  "xfce-4.6alpha",
                  "xfce-4.6beta1",
                  "xfce-4.6beta2",
                  "xfce-4.6beta3"
                ]
              },
              {
                "id": "CVE-2021-32563-6ce5d24f",
                "digest": {
                  "length": 263,
                  "function_hash": "295140515129436387913340608017997340311"
                },
                "source": "https://gitlab.xfce.org/xfce/thunar@1b85b96ebf7cb9bf6a3ddf1acee7643643fdf92d",
                "target": {
                  "file": "thunar/thunar-application.c",
                  "function": "thunar_application_init"
                },
                "deprecated": false,
                "signature_type": "Function",
                "signature_version": "v1",
                "match_only_versions": [
                  "thunar-0.3.0beta1",
                  "thunar-0.3.2beta2",
                  "thunar-0.9.0",
                  "thunar-0.9.80",
                  "thunar-0.9.91",
                  "thunar-0.9.92",
                  "thunar-0.9.93",
                  "thunar-0.9.99.1",
                  "thunar-1.0.1",
                  "thunar-1.1.0",
                  "thunar-1.1.1",
                  "thunar-1.1.2",
                  "thunar-1.1.3",
                  "thunar-1.1.4",
                  "thunar-1.1.5",
                  "thunar-1.1.6",
                  "thunar-1.2.0",
                  "thunar-1.3.0",
                  "thunar-1.3.1",
                  "thunar-1.3.2",
                  "thunar-1.4.0",
                  "thunar-1.5.0",
                  "thunar-1.5.1",
                  "thunar-1.5.2",
                  "thunar-1.5.3",
                  "thunar-1.6.0",
                  "thunar-1.6.1",
                  "thunar-1.6.10",
                  "thunar-1.6.11",
                  "thunar-1.6.12",
                  "thunar-1.6.2",
                  "thunar-1.6.3",
                  "thunar-1.6.4",
                  "thunar-1.6.5",
                  "thunar-1.6.6",
                  "thunar-1.6.7",
                  "thunar-1.6.8",
                  "thunar-1.6.9",
                  "thunar-1.7.0",
                  "thunar-1.7.1",
                  "thunar-1.7.2",
                  "thunar-1.8.0",
                  "thunar-1.8.1",
                  "thunar-1.8.10",
                  "thunar-1.8.11",
                  "thunar-1.8.12",
                  "thunar-1.8.13",
                  "thunar-1.8.14",
                  "thunar-1.8.15",
                  "thunar-1.8.16",
                  "thunar-1.8.2",
                  "thunar-1.8.3",
                  "thunar-1.8.4",
                  "thunar-1.8.5",
                  "thunar-1.8.6",
                  "thunar-1.8.7",
                  "thunar-1.8.8",
                  "thunar-1.8.9",
                  "thunar-4.15.0",
                  "thunar-4.15.1",
                  "thunar-4.15.2",
                  "thunar-4.15.3",
                  "thunar-4.16.0",
                  "thunar-4.17.0",
                  "thunar-4.17.1",
                  "xfce-4.14.0",
                  "xfce-4.14pre1",
                  "xfce-4.14pre2",
                  "xfce-4.14pre3",
                  "xfce-4.16pre1",
                  "xfce-4.16pre2",
                  "xfce-4.4.2",
                  "xfce-4.4beta1",
                  "xfce-4.4beta2",
                  "xfce-4.6alpha",
                  "xfce-4.6beta1",
                  "xfce-4.6beta2",
                  "xfce-4.6beta3"
                ]
              },
              {
                "id": "CVE-2021-32563-8b23ffb8",
                "digest": {
                  "length": 457,
                  "function_hash": "240219985511444574272100991227286123703"
                },
                "source": "https://gitlab.xfce.org/xfce/thunar@9165a61f95e43cc0b5abf9b98eee2818a0191e0b",
                "target": {
                  "file": "thunar/thunar-window.c",
                  "function": "thunar_window_select_files"
                },
                "deprecated": false,
                "signature_type": "Function",
                "signature_version": "v1"
              },
              {
                "id": "CVE-2021-32563-9c155d7c",
                "digest": {
                  "length": 1227,
                  "function_hash": "68292435232507658122657591857538863550"
                },
                "source": "https://gitlab.xfce.org/xfce/thunar@1b85b96ebf7cb9bf6a3ddf1acee7643643fdf92d",
                "target": {
                  "file": "thunar/thunar-application.c",
                  "function": "thunar_application_command_line"
                },
                "deprecated": false,
                "signature_type": "Function",
                "signature_version": "v1",
                "match_only_versions": [
                  "thunar-0.3.0beta1",
                  "thunar-0.3.2beta2",
                  "thunar-0.9.0",
                  "thunar-0.9.80",
                  "thunar-0.9.91",
                  "thunar-0.9.92",
                  "thunar-0.9.93",
                  "thunar-0.9.99.1",
                  "thunar-1.0.1",
                  "thunar-1.1.0",
                  "thunar-1.1.1",
                  "thunar-1.1.2",
                  "thunar-1.1.3",
                  "thunar-1.1.4",
                  "thunar-1.1.5",
                  "thunar-1.1.6",
                  "thunar-1.2.0",
                  "thunar-1.3.0",
                  "thunar-1.3.1",
                  "thunar-1.3.2",
                  "thunar-1.4.0",
                  "thunar-1.5.0",
                  "thunar-1.5.1",
                  "thunar-1.5.2",
                  "thunar-1.5.3",
                  "thunar-1.6.0",
                  "thunar-1.6.1",
                  "thunar-1.6.10",
                  "thunar-1.6.11",
                  "thunar-1.6.12",
                  "thunar-1.6.2",
                  "thunar-1.6.3",
                  "thunar-1.6.4",
                  "thunar-1.6.5",
                  "thunar-1.6.6",
                  "thunar-1.6.7",
                  "thunar-1.6.8",
                  "thunar-1.6.9",
                  "thunar-1.7.0",
                  "thunar-1.7.1",
                  "thunar-1.7.2",
                  "thunar-1.8.0",
                  "thunar-1.8.1",
                  "thunar-1.8.10",
                  "thunar-1.8.11",
                  "thunar-1.8.12",
                  "thunar-1.8.13",
                  "thunar-1.8.14",
                  "thunar-1.8.15",
                  "thunar-1.8.16",
                  "thunar-1.8.2",
                  "thunar-1.8.3",
                  "thunar-1.8.4",
                  "thunar-1.8.5",
                  "thunar-1.8.6",
                  "thunar-1.8.7",
                  "thunar-1.8.8",
                  "thunar-1.8.9",
                  "thunar-4.15.0",
                  "thunar-4.15.1",
                  "thunar-4.15.2",
                  "thunar-4.15.3",
                  "thunar-4.16.0",
                  "thunar-4.17.0",
                  "thunar-4.17.1",
                  "xfce-4.14.0",
                  "xfce-4.14pre1",
                  "xfce-4.14pre2",
                  "xfce-4.14pre3",
                  "xfce-4.16pre1",
                  "xfce-4.16pre2",
                  "xfce-4.4.2",
                  "xfce-4.4beta1",
                  "xfce-4.4beta2",
                  "xfce-4.6alpha",
                  "xfce-4.6beta1",
                  "xfce-4.6beta2",
                  "xfce-4.6beta3"
                ]
              },
              {
                "id": "CVE-2021-32563-9df4f3c4",
                "digest": {
                  "threshold": 0.9,
                  "line_hashes": [
                    "33883801610053101770454332029839617759",
                    "31942194425757146550583624434930046418",
                    "5999911348752228872924859601749310390",
                    "68298791084085739787901773884069998986",
                    "199692913691837589097090413456053514655",
                    "141670879382841887650444079627429453297",
                    "35781408589419365993670024578647521386"
                  ]
                },
                "source": "https://gitlab.xfce.org/xfce/thunar@3b54d9d7dbd7fd16235e2141c43a7f18718f5664",
                "target": {
                  "file": "thunar/thunar-application.h"
                },
                "deprecated": false,
                "signature_type": "Line",
                "signature_version": "v1",
                "match_only_versions": [
                  "thunar-0.3.0beta1",
                  "thunar-0.3.2beta2",
                  "thunar-0.9.0",
                  "thunar-0.9.80",
                  "thunar-0.9.91",
                  "thunar-0.9.92",
                  "thunar-0.9.93",
                  "thunar-0.9.99.1",
                  "thunar-1.0.1",
                  "thunar-1.1.0",
                  "thunar-1.1.1",
                  "thunar-1.1.2",
                  "thunar-1.1.3",
                  "thunar-1.1.4",
                  "thunar-1.1.5",
                  "thunar-1.1.6",
                  "thunar-1.2.0",
                  "thunar-1.3.0",
                  "thunar-1.3.1",
                  "thunar-1.3.2",
                  "thunar-1.4.0",
                  "thunar-1.5.0",
                  "thunar-1.5.1",
                  "thunar-1.5.2",
                  "thunar-1.5.3",
                  "thunar-1.6.0",
                  "thunar-1.6.1",
                  "thunar-1.6.10",
                  "thunar-1.6.11",
                  "thunar-1.6.12",
                  "thunar-1.6.2",
                  "thunar-1.6.3",
                  "thunar-1.6.4",
                  "thunar-1.6.5",
                  "thunar-1.6.6",
                  "thunar-1.6.7",
                  "thunar-1.6.8",
                  "thunar-1.6.9",
                  "thunar-1.7.0",
                  "thunar-1.7.1",
                  "thunar-1.7.2",
                  "thunar-1.8.0",
                  "thunar-1.8.1",
                  "thunar-1.8.10",
                  "thunar-1.8.11",
                  "thunar-1.8.12",
                  "thunar-1.8.13",
                  "thunar-1.8.14",
                  "thunar-1.8.15",
                  "thunar-1.8.16",
                  "thunar-1.8.2",
                  "thunar-1.8.3",
                  "thunar-1.8.4",
                  "thunar-1.8.5",
                  "thunar-1.8.6",
                  "thunar-1.8.7",
                  "thunar-1.8.8",
                  "thunar-1.8.9",
                  "thunar-4.15.0",
                  "thunar-4.15.1",
                  "thunar-4.15.2",
                  "thunar-4.15.3",
                  "thunar-4.16.0",
                  "thunar-4.17.0",
                  "thunar-4.17.1",
                  "xfce-4.14.0",
                  "xfce-4.14pre1",
                  "xfce-4.14pre2",
                  "xfce-4.14pre3",
                  "xfce-4.16pre1",
                  "xfce-4.16pre2",
                  "xfce-4.4.2",
                  "xfce-4.4beta1",
                  "xfce-4.4beta2",
                  "xfce-4.6alpha",
                  "xfce-4.6beta1",
                  "xfce-4.6beta2",
                  "xfce-4.6beta3"
                ]
              },
              {
                "id": "CVE-2021-32563-b3bd2670",
                "digest": {
                  "length": 1446,
                  "function_hash": "211675061993268373167333014712260429383"
                },
                "source": "https://gitlab.xfce.org/xfce/thunar@3b54d9d7dbd7fd16235e2141c43a7f18718f5664",
                "target": {
                  "file": "thunar/thunar-application.c",
                  "function": "thunar_application_process_files_finish"
                },
                "deprecated": false,
                "signature_type": "Function",
                "signature_version": "v1",
                "match_only_versions": [
                  "thunar-0.3.0beta1",
                  "thunar-0.3.2beta2",
                  "thunar-0.9.0",
                  "thunar-0.9.80",
                  "thunar-0.9.91",
                  "thunar-0.9.92",
                  "thunar-0.9.93",
                  "thunar-0.9.99.1",
                  "thunar-1.0.1",
                  "thunar-1.1.0",
                  "thunar-1.1.1",
                  "thunar-1.1.2",
                  "thunar-1.1.3",
                  "thunar-1.1.4",
                  "thunar-1.1.5",
                  "thunar-1.1.6",
                  "thunar-1.2.0",
                  "thunar-1.3.0",
                  "thunar-1.3.1",
                  "thunar-1.3.2",
                  "thunar-1.4.0",
                  "thunar-1.5.0",
                  "thunar-1.5.1",
                  "thunar-1.5.2",
                  "thunar-1.5.3",
                  "thunar-1.6.0",
                  "thunar-1.6.1",
                  "thunar-1.6.10",
                  "thunar-1.6.11",
                  "thunar-1.6.12",
                  "thunar-1.6.2",
                  "thunar-1.6.3",
                  "thunar-1.6.4",
                  "thunar-1.6.5",
                  "thunar-1.6.6",
                  "thunar-1.6.7",
                  "thunar-1.6.8",
                  "thunar-1.6.9",
                  "thunar-1.7.0",
                  "thunar-1.7.1",
                  "thunar-1.7.2",
                  "thunar-1.8.0",
                  "thunar-1.8.1",
                  "thunar-1.8.10",
                  "thunar-1.8.11",
                  "thunar-1.8.12",
                  "thunar-1.8.13",
                  "thunar-1.8.14",
                  "thunar-1.8.15",
                  "thunar-1.8.16",
                  "thunar-1.8.2",
                  "thunar-1.8.3",
                  "thunar-1.8.4",
                  "thunar-1.8.5",
                  "thunar-1.8.6",
                  "thunar-1.8.7",
                  "thunar-1.8.8",
                  "thunar-1.8.9",
                  "thunar-4.15.0",
                  "thunar-4.15.1",
                  "thunar-4.15.2",
                  "thunar-4.15.3",
                  "thunar-4.16.0",
                  "thunar-4.17.0",
                  "thunar-4.17.1",
                  "xfce-4.14.0",
                  "xfce-4.14pre1",
                  "xfce-4.14pre2",
                  "xfce-4.14pre3",
                  "xfce-4.16pre1",
                  "xfce-4.16pre2",
                  "xfce-4.4.2",
                  "xfce-4.4beta1",
                  "xfce-4.4beta2",
                  "xfce-4.6alpha",
                  "xfce-4.6beta1",
                  "xfce-4.6beta2",
                  "xfce-4.6beta3"
                ]
              },
              {
                "id": "CVE-2021-32563-bb90fa0c",
                "digest": {
                  "threshold": 0.9,
                  "line_hashes": [
                    "33883801610053101770454332029839617759",
                    "31942194425757146550583624434930046418",
                    "5999911348752228872924859601749310390",
                    "68298791084085739787901773884069998986",
                    "199692913691837589097090413456053514655",
                    "141670879382841887650444079627429453297",
                    "35781408589419365993670024578647521386"
                  ]
                },
                "source": "https://gitlab.xfce.org/xfce/thunar@1b85b96ebf7cb9bf6a3ddf1acee7643643fdf92d",
                "target": {
                  "file": "thunar/thunar-application.h"
                },
                "deprecated": false,
                "signature_type": "Line",
                "signature_version": "v1",
                "match_only_versions": [
                  "thunar-0.3.0beta1",
                  "thunar-0.3.2beta2",
                  "thunar-0.9.0",
                  "thunar-0.9.80",
                  "thunar-0.9.91",
                  "thunar-0.9.92",
                  "thunar-0.9.93",
                  "thunar-0.9.99.1",
                  "thunar-1.0.1",
                  "thunar-1.1.0",
                  "thunar-1.1.1",
                  "thunar-1.1.2",
                  "thunar-1.1.3",
                  "thunar-1.1.4",
                  "thunar-1.1.5",
                  "thunar-1.1.6",
                  "thunar-1.2.0",
                  "thunar-1.3.0",
                  "thunar-1.3.1",
                  "thunar-1.3.2",
                  "thunar-1.4.0",
                  "thunar-1.5.0",
                  "thunar-1.5.1",
                  "thunar-1.5.2",
                  "thunar-1.5.3",
                  "thunar-1.6.0",
                  "thunar-1.6.1",
                  "thunar-1.6.10",
                  "thunar-1.6.11",
                  "thunar-1.6.12",
                  "thunar-1.6.2",
                  "thunar-1.6.3",
                  "thunar-1.6.4",
                  "thunar-1.6.5",
                  "thunar-1.6.6",
                  "thunar-1.6.7",
                  "thunar-1.6.8",
                  "thunar-1.6.9",
                  "thunar-1.7.0",
                  "thunar-1.7.1",
                  "thunar-1.7.2",
                  "thunar-1.8.0",
                  "thunar-1.8.1",
                  "thunar-1.8.10",
                  "thunar-1.8.11",
                  "thunar-1.8.12",
                  "thunar-1.8.13",
                  "thunar-1.8.14",
                  "thunar-1.8.15",
                  "thunar-1.8.16",
                  "thunar-1.8.2",
                  "thunar-1.8.3",
                  "thunar-1.8.4",
                  "thunar-1.8.5",
                  "thunar-1.8.6",
                  "thunar-1.8.7",
                  "thunar-1.8.8",
                  "thunar-1.8.9",
                  "thunar-4.15.0",
                  "thunar-4.15.1",
                  "thunar-4.15.2",
                  "thunar-4.15.3",
                  "thunar-4.16.0",
                  "thunar-4.17.0",
                  "thunar-4.17.1",
                  "xfce-4.14.0",
                  "xfce-4.14pre1",
                  "xfce-4.14pre2",
                  "xfce-4.14pre3",
                  "xfce-4.16pre1",
                  "xfce-4.16pre2",
                  "xfce-4.4.2",
                  "xfce-4.4beta1",
                  "xfce-4.4beta2",
                  "xfce-4.6alpha",
                  "xfce-4.6beta1",
                  "xfce-4.6beta2",
                  "xfce-4.6beta3"
                ]
              },
              {
                "id": "CVE-2021-32563-bcc23ddb",
                "digest": {
                  "threshold": 0.9,
                  "line_hashes": [
                    "217846621016225848485072870713498074044",
                    "64660158412193811085918561022236540670",
                    "181899418999702034230534458880337942005",
                    "43894642237672623045404286098122510699"
                  ]
                },
                "source": "https://gitlab.xfce.org/xfce/thunar@9165a61f95e43cc0b5abf9b98eee2818a0191e0b",
                "target": {
                  "file": "thunar/thunar-application.c"
                },
                "deprecated": false,
                "signature_type": "Line",
                "signature_version": "v1"
              },
              {
                "id": "CVE-2021-32563-c66191d5",
                "digest": {
                  "length": 1597,
                  "function_hash": "13755289352619420209884812984269774282"
                },
                "source": "https://gitlab.xfce.org/xfce/thunar@1b85b96ebf7cb9bf6a3ddf1acee7643643fdf92d",
                "target": {
                  "file": "thunar/thunar-application.c",
                  "function": "thunar_application_process_filenames"
                },
                "deprecated": false,
                "signature_type": "Function",
                "signature_version": "v1",
                "match_only_versions": [
                  "thunar-0.3.0beta1",
                  "thunar-0.3.2beta2",
                  "thunar-0.9.0",
                  "thunar-0.9.80",
                  "thunar-0.9.91",
                  "thunar-0.9.92",
                  "thunar-0.9.93",
                  "thunar-0.9.99.1",
                  "thunar-1.0.1",
                  "thunar-1.1.0",
                  "thunar-1.1.1",
                  "thunar-1.1.2",
                  "thunar-1.1.3",
                  "thunar-1.1.4",
                  "thunar-1.1.5",
                  "thunar-1.1.6",
                  "thunar-1.2.0",
                  "thunar-1.3.0",
                  "thunar-1.3.1",
                  "thunar-1.3.2",
                  "thunar-1.4.0",
                  "thunar-1.5.0",
                  "thunar-1.5.1",
                  "thunar-1.5.2",
                  "thunar-1.5.3",
                  "thunar-1.6.0",
                  "thunar-1.6.1",
                  "thunar-1.6.10",
                  "thunar-1.6.11",
                  "thunar-1.6.12",
                  "thunar-1.6.2",
                  "thunar-1.6.3",
                  "thunar-1.6.4",
                  "thunar-1.6.5",
                  "thunar-1.6.6",
                  "thunar-1.6.7",
                  "thunar-1.6.8",
                  "thunar-1.6.9",
                  "thunar-1.7.0",
                  "thunar-1.7.1",
                  "thunar-1.7.2",
                  "thunar-1.8.0",
                  "thunar-1.8.1",
                  "thunar-1.8.10",
                  "thunar-1.8.11",
                  "thunar-1.8.12",
                  "thunar-1.8.13",
                  "thunar-1.8.14",
                  "thunar-1.8.15",
                  "thunar-1.8.16",
                  "thunar-1.8.2",
                  "thunar-1.8.3",
                  "thunar-1.8.4",
                  "thunar-1.8.5",
                  "thunar-1.8.6",
                  "thunar-1.8.7",
                  "thunar-1.8.8",
                  "thunar-1.8.9",
                  "thunar-4.15.0",
                  "thunar-4.15.1",
                  "thunar-4.15.2",
                  "thunar-4.15.3",
                  "thunar-4.16.0",
                  "thunar-4.17.0",
                  "thunar-4.17.1",
                  "xfce-4.14.0",
                  "xfce-4.14pre1",
                  "xfce-4.14pre2",
                  "xfce-4.14pre3",
                  "xfce-4.16pre1",
                  "xfce-4.16pre2",
                  "xfce-4.4.2",
                  "xfce-4.4beta1",
                  "xfce-4.4beta2",
                  "xfce-4.6alpha",
                  "xfce-4.6beta1",
                  "xfce-4.6beta2",
                  "xfce-4.6beta3"
                ]
              },
              {
                "id": "CVE-2021-32563-d648f2d0",
                "digest": {
                  "length": 1117,
                  "function_hash": "76453521844426154463468593598021274668"
                },
                "source": "https://gitlab.xfce.org/xfce/thunar@1b85b96ebf7cb9bf6a3ddf1acee7643643fdf92d",
                "target": {
                  "file": "thunar/thunar-application.c",
                  "function": "thunar_application_process_files_finish"
                },
                "deprecated": false,
                "signature_type": "Function",
                "signature_version": "v1"
              },
              {
                "id": "CVE-2021-32563-e24206da",
                "digest": {
                  "threshold": 0.9,
                  "line_hashes": [
                    "71995599210645557607068850389178420250",
                    "176431535656620076387624886239560476324",
                    "119060238380255805610963994524452940987"
                  ]
                },
                "source": "https://gitlab.xfce.org/xfce/thunar@9165a61f95e43cc0b5abf9b98eee2818a0191e0b",
                "target": {
                  "file": "thunar/thunar-window.h"
                },
                "deprecated": false,
                "signature_type": "Line",
                "signature_version": "v1"
              },
              {
                "id": "CVE-2021-32563-e78764ce",
                "digest": {
                  "length": 1597,
                  "function_hash": "13755289352619420209884812984269774282"
                },
                "source": "https://gitlab.xfce.org/xfce/thunar@3b54d9d7dbd7fd16235e2141c43a7f18718f5664",
                "target": {
                  "file": "thunar/thunar-application.c",
                  "function": "thunar_application_process_filenames"
                },
                "deprecated": false,
                "signature_type": "Function",
                "signature_version": "v1",
                "match_only_versions": [
                  "thunar-0.3.0beta1",
                  "thunar-0.3.2beta2",
                  "thunar-0.9.0",
                  "thunar-0.9.80",
                  "thunar-0.9.91",
                  "thunar-0.9.92",
                  "thunar-0.9.93",
                  "thunar-0.9.99.1",
                  "thunar-1.0.1",
                  "thunar-1.1.0",
                  "thunar-1.1.1",
                  "thunar-1.1.2",
                  "thunar-1.1.3",
                  "thunar-1.1.4",
                  "thunar-1.1.5",
                  "thunar-1.1.6",
                  "thunar-1.2.0",
                  "thunar-1.3.0",
                  "thunar-1.3.1",
                  "thunar-1.3.2",
                  "thunar-1.4.0",
                  "thunar-1.5.0",
                  "thunar-1.5.1",
                  "thunar-1.5.2",
                  "thunar-1.5.3",
                  "thunar-1.6.0",
                  "thunar-1.6.1",
                  "thunar-1.6.10",
                  "thunar-1.6.11",
                  "thunar-1.6.12",
                  "thunar-1.6.2",
                  "thunar-1.6.3",
                  "thunar-1.6.4",
                  "thunar-1.6.5",
                  "thunar-1.6.6",
                  "thunar-1.6.7",
                  "thunar-1.6.8",
                  "thunar-1.6.9",
                  "thunar-1.7.0",
                  "thunar-1.7.1",
                  "thunar-1.7.2",
                  "thunar-1.8.0",
                  "thunar-1.8.1",
                  "thunar-1.8.10",
                  "thunar-1.8.11",
                  "thunar-1.8.12",
                  "thunar-1.8.13",
                  "thunar-1.8.14",
                  "thunar-1.8.15",
                  "thunar-1.8.16",
                  "thunar-1.8.2",
                  "thunar-1.8.3",
                  "thunar-1.8.4",
                  "thunar-1.8.5",
                  "thunar-1.8.6",
                  "thunar-1.8.7",
                  "thunar-1.8.8",
                  "thunar-1.8.9",
                  "thunar-4.15.0",
                  "thunar-4.15.1",
                  "thunar-4.15.2",
                  "thunar-4.15.3",
                  "thunar-4.16.0",
                  "thunar-4.17.0",
                  "thunar-4.17.1",
                  "xfce-4.14.0",
                  "xfce-4.14pre1",
                  "xfce-4.14pre2",
                  "xfce-4.14pre3",
                  "xfce-4.16pre1",
                  "xfce-4.16pre2",
                  "xfce-4.4.2",
                  "xfce-4.4beta1",
                  "xfce-4.4beta2",
                  "xfce-4.6alpha",
                  "xfce-4.6beta1",
                  "xfce-4.6beta2",
                  "xfce-4.6beta3"
                ]
              },
              {
                "id": "CVE-2021-32563-e83755e9",
                "digest": {
                  "threshold": 0.9,
                  "line_hashes": [
                    "195470704098790955053997434797781333610",
                    "294593178307349962211822224981884982439",
                    "237836334247483354412060104701140496504",
                    "25744477612665038666142578699714641948",
                    "210903922429604648927034136560186576621",
                    "87829882380763779028356856767485725253",
                    "116412102868994170465163048963147799421",
                    "52831437443336667610700417247031608224",
                    "309869385550930135943211102869211562463"
                  ]
                },
                "source": "https://gitlab.xfce.org/xfce/thunar@9165a61f95e43cc0b5abf9b98eee2818a0191e0b",
                "target": {
                  "file": "thunar/thunar-window.c"
                },
                "deprecated": false,
                "signature_type": "Line",
                "signature_version": "v1"
              },
              {
                "id": "CVE-2021-32563-e9e9b7e4",
                "digest": {
                  "length": 263,
                  "function_hash": "295140515129436387913340608017997340311"
                },
                "source": "https://gitlab.xfce.org/xfce/thunar@3b54d9d7dbd7fd16235e2141c43a7f18718f5664",
                "target": {
                  "file": "thunar/thunar-application.c",
                  "function": "thunar_application_init"
                },
                "deprecated": false,
                "signature_type": "Function",
                "signature_version": "v1",
                "match_only_versions": [
                  "thunar-0.3.0beta1",
                  "thunar-0.3.2beta2",
                  "thunar-0.9.0",
                  "thunar-0.9.80",
                  "thunar-0.9.91",
                  "thunar-0.9.92",
                  "thunar-0.9.93",
                  "thunar-0.9.99.1",
                  "thunar-1.0.1",
                  "thunar-1.1.0",
                  "thunar-1.1.1",
                  "thunar-1.1.2",
                  "thunar-1.1.3",
                  "thunar-1.1.4",
                  "thunar-1.1.5",
                  "thunar-1.1.6",
                  "thunar-1.2.0",
                  "thunar-1.3.0",
                  "thunar-1.3.1",
                  "thunar-1.3.2",
                  "thunar-1.4.0",
                  "thunar-1.5.0",
                  "thunar-1.5.1",
                  "thunar-1.5.2",
                  "thunar-1.5.3",
                  "thunar-1.6.0",
                  "thunar-1.6.1",
                  "thunar-1.6.10",
                  "thunar-1.6.11",
                  "thunar-1.6.12",
                  "thunar-1.6.2",
                  "thunar-1.6.3",
                  "thunar-1.6.4",
                  "thunar-1.6.5",
                  "thunar-1.6.6",
                  "thunar-1.6.7",
                  "thunar-1.6.8",
                  "thunar-1.6.9",
                  "thunar-1.7.0",
                  "thunar-1.7.1",
                  "thunar-1.7.2",
                  "thunar-1.8.0",
                  "thunar-1.8.1",
                  "thunar-1.8.10",
                  "thunar-1.8.11",
                  "thunar-1.8.12",
                  "thunar-1.8.13",
                  "thunar-1.8.14",
                  "thunar-1.8.15",
                  "thunar-1.8.16",
                  "thunar-1.8.2",
                  "thunar-1.8.3",
                  "thunar-1.8.4",
                  "thunar-1.8.5",
                  "thunar-1.8.6",
                  "thunar-1.8.7",
                  "thunar-1.8.8",
                  "thunar-1.8.9",
                  "thunar-4.15.0",
                  "thunar-4.15.1",
                  "thunar-4.15.2",
                  "thunar-4.15.3",
                  "thunar-4.16.0",
                  "thunar-4.17.0",
                  "thunar-4.17.1",
                  "xfce-4.14.0",
                  "xfce-4.14pre1",
                  "xfce-4.14pre2",
                  "xfce-4.14pre3",
                  "xfce-4.16pre1",
                  "xfce-4.16pre2",
                  "xfce-4.4.2",
                  "xfce-4.4beta1",
                  "xfce-4.4beta2",
                  "xfce-4.6alpha",
                  "xfce-4.6beta1",
                  "xfce-4.6beta2",
                  "xfce-4.6beta3"
                ]
              },
              {
                "id": "CVE-2021-32563-f00a346b",
                "digest": {
                  "threshold": 0.9,
                  "line_hashes": [
                    "333741236351249368640136793175355211632",
                    "196023527416500479017541562811996078200",
                    "312149587464661582791396048727543242774",
                    "82789431063833627206592324110022651623"
                  ]
                },
                "source": "https://gitlab.xfce.org/xfce/thunar@1b85b96ebf7cb9bf6a3ddf1acee7643643fdf92d",
                "target": {
                  "file": "thunar/thunar-dbus-service.c"
                },
                "deprecated": false,
                "signature_type": "Line",
                "signature_version": "v1",
                "match_only_versions": [
                  "thunar-0.3.0beta1",
                  "thunar-0.3.2beta2",
                  "thunar-0.9.0",
                  "thunar-0.9.80",
                  "thunar-0.9.91",
                  "thunar-0.9.92",
                  "thunar-0.9.93",
                  "thunar-0.9.99.1",
                  "thunar-1.0.1",
                  "thunar-1.1.0",
                  "thunar-1.1.1",
                  "thunar-1.1.2",
                  "thunar-1.1.3",
                  "thunar-1.1.4",
                  "thunar-1.1.5",
                  "thunar-1.1.6",
                  "thunar-1.2.0",
                  "thunar-1.3.0",
                  "thunar-1.3.1",
                  "thunar-1.3.2",
                  "thunar-1.4.0",
                  "thunar-1.5.0",
                  "thunar-1.5.1",
                  "thunar-1.5.2",
                  "thunar-1.5.3",
                  "thunar-1.6.0",
                  "thunar-1.6.1",
                  "thunar-1.6.10",
                  "thunar-1.6.11",
                  "thunar-1.6.12",
                  "thunar-1.6.2",
                  "thunar-1.6.3",
                  "thunar-1.6.4",
                  "thunar-1.6.5",
                  "thunar-1.6.6",
                  "thunar-1.6.7",
                  "thunar-1.6.8",
                  "thunar-1.6.9",
                  "thunar-1.7.0",
                  "thunar-1.7.1",
                  "thunar-1.7.2",
                  "thunar-1.8.0",
                  "thunar-1.8.1",
                  "thunar-1.8.10",
                  "thunar-1.8.11",
                  "thunar-1.8.12",
                  "thunar-1.8.13",
                  "thunar-1.8.14",
                  "thunar-1.8.15",
                  "thunar-1.8.16",
                  "thunar-1.8.2",
                  "thunar-1.8.3",
                  "thunar-1.8.4",
                  "thunar-1.8.5",
                  "thunar-1.8.6",
                  "thunar-1.8.7",
                  "thunar-1.8.8",
                  "thunar-1.8.9",
                  "thunar-4.15.0",
                  "thunar-4.15.1",
                  "thunar-4.15.2",
                  "thunar-4.15.3",
                  "thunar-4.16.0",
                  "thunar-4.17.0",
                  "thunar-4.17.1",
                  "xfce-4.14.0",
                  "xfce-4.14pre1",
                  "xfce-4.14pre2",
                  "xfce-4.14pre3",
                  "xfce-4.16pre1",
                  "xfce-4.16pre2",
                  "xfce-4.4.2",
                  "xfce-4.4beta1",
                  "xfce-4.4beta2",
                  "xfce-4.6alpha",
                  "xfce-4.6beta1",
                  "xfce-4.6beta2",
                  "xfce-4.6beta3"
                ]
              }
            ],
            "vanir_signatures_modified": "2026-10-24T14:31:38Z"
          }
        }
      ],
      "modified": "2026-10-24T14:31:38.309468669Z",
      "provider": "osv",
      "references": [
        "https://gitlab.xfce.org/xfce/thunar/-/tags",
        "https://www.openwall.com/lists/oss-security/2021/05/09/2",
        "https://gitlab.xfce.org/xfce/thunar/-/commit/1b85b96ebf7cb9bf6a3ddf1acee7643643fdf92d",
        "https://gitlab.xfce.org/xfce/thunar/-/commit/3b54d9d7dbd7fd16235e2141c43a7f18718f5664",
        "https://gitlab.xfce.org/xfce/thunar/-/commit/9165a61f95e43cc0b5abf9b98eee2818a0191e0b"
      ],
      "provider_metadata": {}
    },
    "related_cves": [
      {
        "value": "CVE-2021-32563",
        "evidence": "/id"
      }
    ],
    "security_relevant": true,
    "severity_evidence": "/severity/0/score"
  },
  "source_id": "core-osv",
  "document_id": 443766,
  "published_at": "2021-05-11T05:15:07.217+00:00"
}