Keybase 5.8.0 for Android

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:keybase:keybase:5.8.0:*:*:*:*:android:*:*

part: a version: 5.8.0 update: *

VendorKeybase (e8a3d3ed-47d2-55bf-bed5-73bbb987b4b7)
ProductKeybase (a41ab9bf-0ecb-560b-a32e-c51e20773f44)
Edition*
Language*
Software edition*
Target softwareandroid
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/keybase/client purl2cpe 2026-06-01 10:12:25.329764
pkg:golang/github.com/keybase/client purl2cpe 2026-06-01 10:12:25.329766
pkg:rpm/opensuse/keybase-client purl2cpe 2026-06-01 10:12:25.329768
pkg:sourceforge/keybase-client.mirror purl2cpe 2026-06-01 10:12:25.329770

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-34421 vulnerable 2026-06-08 05:32:13.286392 Retained exploded messages in Keybase Clients for Android and iOS
LOW (3.7)
The Keybase Client for Android before version 5.8.0 and the Keybase Client for iOS before version 5.8.0 fails to properly remove exploded messages initiated by a user if the receiving user places the chat session in the background while the sending user explodes the messages. This could lead to disclosure of sensitive information which was meant to be deleted from the customer's device.
Published: 2021-11-11T22:58:37.355Z
Updated: 2024-09-17T01:41:23.193Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.