signalapp/Signal-Desktop

signalapp/Signal-Desktop

GitHubGitHub
GitHubgithub.com
signal.orgsignal.org
Releases1.05K
Frequency3 days 16 hours
Last Release
Stars16.3K
A private messenger for Windows, macOS, and Linux.
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2019-19954↗
7.3 HIGH6.9 MEDIUM

Signal Desktop before 1.29.1 on Windows allows local users to gain privileges by creating a Trojan horse %SYSTEMDRIVE%\node_modules\.bin\wmic.exe file.

CVE-2018-10994↗
—4.3 MEDIUM

js/views/message_view.js in Open Whisper Signal (aka Signal-Desktop) before 1.10.1 allows XSS via a URL.