authy vulnerabilities and fixes

Recent CVEs affecting authy, with upgrade or downgrade steps. 1 tracked.

authy has 1 tracked vulnerability, 0 critical and 1 exploited in the wild (CISA KEV). A fixed release or vendor patch exists for 1. Most recent: 2024-07-02. Highest priority: CVE-2024-39891 (score 68/100).

• CVE-2024-39891 MEDIUM 5.3 EXPLOITED UPGRADE UPGRADE Twilio Authy Information Disclosure Vulnerability

FAQ

How do I fix authy vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is authy being exploited right now?

Yes: 1 authy CVE is on the CISA Known Exploited Vulnerabilities list, so patch it first.

Which authy CVE should I patch first?

CVE-2024-39891 currently ranks highest (68/100): Twilio Authy Information Disclosure Vulnerability.

← Back to latest CVEs