Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2021-11-11	CVE-2021-34421	Information Exposure vulnerability in Keybase 5.8.0 The Keybase Client for Android before version 5.8.0 and the Keybase Client for iOS before version 5.8.0 fails to properly remove exploded messages initiated by a user if the receiving user places the chat session in the background while the sending user explodes the messages. network keybase CWE-200	4.3
2021-11-11	CVE-2021-34422	Path Traversal vulnerability in Keybase The Keybase Client for Windows before version 5.7.0 contains a path traversal vulnerability when checking the name of a file uploaded to a team folder. network keybase CWE-22	6.0
2019-09-30	CVE-2019-16992	Improper Verification of Cryptographic Signature vulnerability in Keybase 2.13.2 The Keybase app 2.13.2 for iOS provides potentially insufficient notice that it is employing a user's private key to sign a certain cryptocurrency attestation (that an address at keybase.io can be used for Stellar payments to the user), which might be incompatible with a user's personal position on the semantics of an attestation. network low complexity keybase CWE-347	5.0