CVE-2020-26966 affects multiple packages. Searching for a single word from the address bar caused an mDNS request to be sent on the local network searching for a hostname consisting of that string; resulting in an information leak. See references for individual vulnerability details.