Approved changes feed: RSS · Atom

cpe:2.3:a:keybase:keybase:*:*:*:*:*:macos:*:*

part: a version: * update: *

VendorKeybase (e8a3d3ed-47d2-55bf-bed5-73bbb987b4b7)
ProductKeybase (a41ab9bf-0ecb-560b-a32e-c51e20773f44)
Edition*
Language*
Software edition*
Target softwaremacos
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/keybase/client purl2cpe 2026-06-01 10:12:25.467748
pkg:golang/github.com/keybase/client purl2cpe 2026-06-01 10:12:25.467750
pkg:rpm/opensuse/keybase-client purl2cpe 2026-06-01 10:12:25.467752
pkg:sourceforge/keybase-client.mirror purl2cpe 2026-06-01 10:12:25.467754

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-7249 vulnerable 2026-06-08 05:14:14.146933 Details available
In Keybase before 2.12.6 on macOS, the move RPC to the Helper was susceptible to time-to-check-time-to-use bugs and would also allow one user of the system (who didn't have root access) to tamper with another's installs.
Published: 2019-01-31T08:00:00.000Z
Updated: 2024-08-04T20:46:45.971Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.