signalapp/Signal-Desktop

Releases1.05K

Frequency3 days 16 hours

Last Release about 7 hours ago

Stars16.3K

A private messenger for Windows, macOS, and Linux.

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2019-19954 ↗	Dec 24, 2019Tuesday, 24 December 2019, 15:15	7.3 HIGH	6.9 MEDIUM
Signal Desktop before 1.29.1 on Windows allows local users to gain privileges by creating a Trojan horse %SYSTEMDRIVE%\node_modules\.bin\wmic.exe file.
CVE-2018-10994 ↗	May 14, 2018Monday, 14 May 2018, 23:29	—	4.3 MEDIUM
js/views/message_view.js in Open Whisper Signal (aka Signal-Desktop) before 1.10.1 allows XSS via a URL.