Read the docs

whisperfish

Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high5CVSS 7.0–8.9

Exploited now

whisperfish records in CISA KEV

No whisperfish vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Blurhash-rs 1 record LOW Phonenumber 1 record LOW

Records

5 records

TI-2023-22609 CVE-2023-42444 · GHSA-whhr-7f2w-qqj2

phonenumber panics on parsing crafted RF3966 inputs

Priority LOW 39

phonenumber is a library for parsing, formatting and validating international phone numbers.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00867 Published 2023-09-19 Fixed in 0.2.5+8.11.3, 0.3.3+8.3.19 +2 CWE-1284
TI-2023-22612 CVE-2023-42447 · GHSA-cxvp-82cq-57h2

blurhash panics on parsing crafted inputs

Priority LOW 38

blurhash-rs is a pure Rust implementation of Blurhash, software for encoding images into ASCII strings that can be turned into a gradient of colors representing the original image.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00624 Published 2023-09-19 Fixed in 0.2.0 CWE-1284
TI-2025-18605 CVE-2025-24903

libsignal-service-rs Doesn't Check Origin of Sync Messages

Priority LOW 36

libsignal-service-rs is a Rust version of the libsignal-service-java library which implements the core functionality to communicate with Signal servers.

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00186 Published 2025-02-13 Fixed in 82d70f6720e762898f34ae76b0894b0297d9b2f8 CWE-345
Open these records in search →