Vulnerabilities > Keybase > Medium

DATE CVE VULNERABILITY TITLE RISK
2021-11-11 CVE-2021-34421 Incomplete Cleanup vulnerability in Keybase 5.8.0
The Keybase Client for Android before version 5.8.0 and the Keybase Client for iOS before version 5.8.0 fails to properly remove exploded messages initiated by a user if the receiving user places the chat session in the background while the sending user explodes the messages.
network
low complexity
keybase CWE-459
4.3
2021-02-23 CVE-2021-23827 Cleartext Storage of Sensitive Information vulnerability in Keybase
Keybase Desktop Client before 5.6.0 on Windows and macOS, and before 5.6.1 on Linux, allows an attacker to obtain potentially sensitive media (such as private pictures) in the Cache and uploadtemps directories.
local
low complexity
keybase CWE-312
5.5