Approved changes feed: RSS · Atom
cpe:2.3:a:twilio:authy:*:*:*:*:*:iphone_os:*:*
part: a version: * update: *
| Vendor | Twilio (967eb3e1-96f4-5f82-91e8-30cd1fcf46ac) |
|---|---|
| Product | Authy (df420b74-ec64-536e-a637-905bcfe9692f) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | iphone_os |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:gem/twilio-ruby |
purl2cpe | 2026-06-01 10:12:06.158240 |
pkg:github/twilio/twilio-csharp |
purl2cpe | 2026-06-01 10:12:06.158242 |
pkg:github/twilio/twilio-go |
purl2cpe | 2026-06-01 10:12:06.158243 |
pkg:github/twilio/twilio-java |
purl2cpe | 2026-06-01 10:12:06.158245 |
pkg:github/twilio/twilio-node |
purl2cpe | 2026-06-01 10:12:06.158246 |
pkg:github/twilio/twilio-php |
purl2cpe | 2026-06-01 10:12:06.158247 |
pkg:github/twilio/twilio-python |
purl2cpe | 2026-06-01 10:12:06.158249 |
pkg:github/twilio/twilio-ruby |
purl2cpe | 2026-06-01 10:12:06.158250 |
pkg:golang/github.com/twilio/twilio-go |
purl2cpe | 2026-06-01 10:12:06.158252 |
pkg:maven/com.twilio.sdk/twilio |
purl2cpe | 2026-06-01 10:12:06.158253 |
pkg:npm/twilio |
purl2cpe | 2026-06-01 10:12:06.158254 |
pkg:nuget/twilio |
purl2cpe | 2026-06-01 10:12:06.158256 |
pkg:pypi/twilio |
purl2cpe | 2026-06-01 10:12:06.158257 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-39891 |
vulnerable | 2026-06-08 06:41:51.790636 |
Details available
MEDIUM (5.3)
In the Twilio Authy API, accessed by Authy Android before 25.1.0 and Authy iOS before 26.1.0, an unauthenticated endpoint provided access to certain phone-number data, as exploited in the wild in June 2024. Specifically, the endpoint accepted a stream of requests containing phone numbers, and responded with information about whether each phone number was registered with Authy. (Authy accounts were not compromised, however.)
Published: 2024-07-02T00:00:00.000Z
Updated: 2025-10-21T22:55:50.240Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.