https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2022-22779.htmlhttps://patchthecve.com/cve/CVE-2022-22779.htmlWed, 17 Jun 2026 04:29:01 +0000LOW 3.7: The Keybase Clients for macOS and Windows before version 5.9.0 fails to properly remove exploded messages initiated by a user. This can occur if the receiving user switches to a non-chat feature and places the host in a sleep state before the sending user explodes the messages. This could lead to dihttps://patchthecve.com/cve/CVE-2021-34426.htmlhttps://patchthecve.com/cve/CVE-2021-34426.htmlWed, 17 Jun 2026 03:55:50 +0000MEDIUM 5.3: A vulnerability was discovered in the Keybase Client for Windows before version 5.6.0 when a user executed the "keybase git lfs-config" command on the command-line. In versions prior to 5.6.0, a malicious actor with write access to a user\'s Git repository could leverage this vulnerability to potenthttps://patchthecve.com/cve/CVE-2021-34422.htmlhttps://patchthecve.com/cve/CVE-2021-34422.htmlWed, 17 Jun 2026 03:55:49 +0000HIGH 7.2: The Keybase Client for Windows before version 5.7.0 contains a path traversal vulnerability when checking the name of a file uploaded to a team folder. A malicious user could upload a file to a shared folder with a specially crafted file name which could allow a user to execute an application which https://patchthecve.com/cve/CVE-2021-34421.htmlhttps://patchthecve.com/cve/CVE-2021-34421.htmlWed, 17 Jun 2026 03:55:49 +0000LOW 3.7: The Keybase Client for Android before version 5.8.0 and the Keybase Client for iOS before version 5.8.0 fails to properly remove exploded messages initiated by a user if the receiving user places the chat session in the background while the sending user explodes the messages. This could lead to dischttps://patchthecve.com/cve/CVE-2021-23827.htmlhttps://patchthecve.com/cve/CVE-2021-23827.htmlWed, 17 Jun 2026 03:38:53 +0000MEDIUM 5.5: Keybase Desktop Client before 5.6.0 on Windows and macOS, and before 5.6.1 on Linux, allows an attacker to obtain potentially sensitive media (such as private pictures) in the Cache and uploadtemps directories. It fails to effectively clear cached pictures, even after deletion via normal methodology