Approved changes feed: RSS · Atom

cpe:2.3:o:keybase:keybase:*:*:*:*:*:*:*:*

part: o version: * update: *

VendorKeybase (e8a3d3ed-47d2-55bf-bed5-73bbb987b4b7)
ProductKeybase (a41ab9bf-0ecb-560b-a32e-c51e20773f44)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/keybase/client purl2cpe 2026-06-01 10:12:25.471962
pkg:golang/github.com/keybase/client purl2cpe 2026-06-01 10:12:25.471965
pkg:rpm/opensuse/keybase-client purl2cpe 2026-06-01 10:12:25.471967
pkg:sourceforge/keybase-client.mirror purl2cpe 2026-06-01 10:12:25.471968

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-23827 vulnerable 2026-06-08 05:30:03.085316 Details available
Keybase Desktop Client before 5.6.0 on Windows and macOS, and before 5.6.1 on Linux, allows an attacker to obtain potentially sensitive media (such as private pictures) in the Cache and uploadtemps directories. It fails to effectively clear cached pictures, even after deletion via normal methodology within the client, or by utilizing the "Explode message/Explode now" functionality. Local filesystem access is needed by the attacker.
Published: 2021-02-22T23:07:21.000Z
Updated: 2024-08-03T19:14:08.885Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.