PatchTheCVEkeybase vulnerabilities and fixes
Recent CVEs affecting keybase, with upgrade or downgrade steps. 5 tracked.
keybase has 5 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 4. Most recent: 2022-02-09. Highest priority: CVE-2021-34422 (score 48/100).
- CVE-2022-22779 LOW 3.7 UPGRADE The Keybase Clients for macOS and Windows before version 5.9.0 fails to properly remove exploded messages init
- CVE-2021-34426 MEDIUM 5.3 UPGRADE A vulnerability was discovered in the Keybase Client for Windows before version 5.6.0 when a user executed the
- CVE-2021-34422 HIGH 7.2 UPGRADE The Keybase Client for Windows before version 5.7.0 contains a path traversal vulnerability when checking the
- CVE-2021-34421 LOW 3.7 DOWNGRADE DOWNGRADE The Keybase Client for Android before version 5.8.0 and the Keybase Client for iOS before version 5.8.0 fails
- CVE-2021-23827 MEDIUM 5.5 UPGRADE UPGRADE Keybase Desktop Client before 5.6.0 on Windows and macOS, and before 5.6.1 on Linux, allows an attacker to obt
FAQ
How do I fix keybase vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is keybase being exploited right now?
None of the tracked keybase CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which keybase CVE should I patch first?
CVE-2021-34422 currently ranks highest (48/100): The Keybase Client for Windows before version 5.7.0 contains a path traversal vulnerability when checking the .