Approved changes feed: RSS · Atom

cpe:2.3:a:keybase:keybase:5.8.0:*:*:*:*:iphone_os:*:*

part: a version: 5.8.0 update: *

VendorKeybase (e8a3d3ed-47d2-55bf-bed5-73bbb987b4b7)
ProductKeybase (a41ab9bf-0ecb-560b-a32e-c51e20773f44)
Edition*
Language*
Software edition*
Target softwareiphone_os
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/keybase/client purl2cpe 2026-06-01 10:12:25.329771
pkg:golang/github.com/keybase/client purl2cpe 2026-06-01 10:12:25.329773
pkg:rpm/opensuse/keybase-client purl2cpe 2026-06-01 10:12:25.329775
pkg:sourceforge/keybase-client.mirror purl2cpe 2026-06-01 10:12:25.329777

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-34421 vulnerable 2026-06-08 05:32:13.286909 Retained exploded messages in Keybase Clients for Android and iOS
LOW (3.7)
The Keybase Client for Android before version 5.8.0 and the Keybase Client for iOS before version 5.8.0 fails to properly remove exploded messages initiated by a user if the receiving user places the chat session in the background while the sending user explodes the messages. This could lead to disclosure of sensitive information which was meant to be deleted from the customer's device.
Published: 2021-11-11T22:58:37.355Z
Updated: 2024-09-17T01:41:23.193Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.