Mumble before 1.3.4 allows remote code execution if a victim navigates to a crafted URL on a server list and clicks on the Open Webpage text (CVE-2021-27229).
{ "section": "core" }
"https://advisories.mageia.org/MGASA-2021-0125.json"