Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: lucasrodes whatstk 0.9.0 Clear all filters
TI-2026-84557 CVE-2026-121577 · GHSA-g94x-jrvx-m3cv

Unescaped header separators in whatstk cause exponential regex backtracking

Priority LOW 29

Inefficient Regular Expression Complexity (CWE-1333) in generate_regex() (whatstk/whatsapp/parser.py) in whatstk from 0.2.0 before 0.9.0 allows a party that supplies a chat export to consume the CPU of the process that p…

CVSS 4.0MEDIUM 6.7 Local No auth User interaction EPSS 0.00129 Published 2026-11-03 Fixed in 0.9.0 CWE-1333
TI-2026-84373 CVE-2026-121564 · GHSA-jhwv-p2mf-f4x9

whatstk merge silently drops messages whose dates overlap another chat

Priority LOW 10

Incomplete Comparison with Missing Factors (CWE-1023) in merge_chats() (whatstk/utils/chat_merge.py), reached from BaseChat.merge(), in whatstk from 0.3.0 before 0.9.0 allows a party that supplies the chat exports to cau…

CVSS 4.0LOW 1.8 Local No auth User interaction EPSS 0.0034 Published 2026-11-03 Fixed in 0.9.0 CWE-1023