From 028cdc0b419eca66cc6f740fc8357258b1f68e1f Mon Sep 17 00:00:00 2001
From: Janek Bevendorff <janek@keepassxc.org>
Date: Mon, 9 Mar 2026 23:02:26 +0100
Subject: [PATCH] Set OPENSSL_MODULES to invalid location

---
 src/main.cpp | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/src/main.cpp b/src/main.cpp
index 06cf73552..cb7cb18f9 100644
--- a/src/main.cpp
+++ b/src/main.cpp
@@ -54,9 +54,10 @@ int main(int argc, char** argv)
     QT_REQUIRE_VERSION(argc, argv, QT_VERSION_STR)
 
 #ifdef Q_OS_WIN
-    // Set OPENSSL_CONF to an invalid location to prevent DLL injection via openssl.cnf.
+    // Set OPENSSL_CONF and OPENSSL_MODULES to an invalid location to prevent DLL injection via openssl.cnf.
     // vcpkg by default hard-codes this to its packages location, which may be user-writable.
     qputenv("OPENSSL_CONF", "::");
+    qputenv("OPENSSL_MODULES", "::");
 #endif
 
     QApplication::setAttribute(Qt::AA_EnableHighDpiScaling);