simplex-chat/simplexmq

simplex-chat/simplexmq

Releases177
Frequency1 week 4 days
Last Release
Stars801
⚙️ SimpleXMQ - A reference implementation of the SimpleX Messaging Protocol for simplex queues over public networks.

CVE History

CVEPublishedCVSS v3CVSS v2
5.3 MEDIUM

SimpleXMQ before 3.4.0, as used in SimpleX Chat before 4.2, does not apply a key derivation function to intended data, which can interfere with forward secrecy and can have other impacts if there is a compromise of a single private key. This occurs in the X3DH key exchange for the double ratchet protocol.