Whisperfish vulnerabilities
We track 5 vulnerabilities in Whisperfish products across 4 products. 5 are rated high or critical, and none are known to be exploited. The most recent was published on February 13, 2025.
Latest Whisperfish vulnerabilities
- 8.5 High severity
libsignal-service-rs: Improper Neutralization of Special Elements in Output Used by a Downstream Component
libsignal-service-rs is a Rust version of the libsignal-service-java library which implements the core functionality to communicate with Signal servers. Prior to commit 82d70f6720e762898f34ae76b0894b0297d9b2f8, plaintext content envelopes could be injected by
- 8.5 High severity
libsignal-service-rs: Insufficient Verification of Data Authenticity
libsignal-service-rs is a Rust version of the libsignal-service-java library which implements the core functionality to communicate with Signal servers. Prior to commit 82d70f6720e762898f34ae76b0894b0297d9b2f8, any contact may forge a sync message, impersonati
- 8.6 High severity
rust-phonenumber: Improper Access Control
phonenumber is a library for parsing, formatting and validating international phone numbers. Since 0.3.4, the phonenumber parsing code may panic due to a panic-guarded out-of-bounds access on the phonenumber string. In a typical deployment of rust-phonenumber,
- 7.5 High severity
blurhash-rs: Improper Validation of Specified Quantity in Input
blurhash-rs is a pure Rust implementation of Blurhash, software for encoding images into ASCII strings that can be turned into a gradient of colors representing the original image. In version 0.1.1, the blurhash parsing code may panic due to multiple panic-gua
- 7.5 High severity
rust-phonenumber: Improper Validation of Specified Quantity in Input
phonenumber is a library for parsing, formatting and validating international phone numbers. Prior to versions `0.3.3+8.13.9` and `0.2.5+8.11.3`, the phonenumber parsing code may panic due to a panic-guarded out-of-bounds access on the phonenumber string. In a