Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Keybase Client Allows Malicious Domain Names
published 3 months ago
Summary
Keybase Client is affected by a security issue that could allow attackers to use malicious domain names. This could potentially lead to phishing attacks or other malicious activities. Users should update their Keybase Client to the latest version to fix this issue.
What to do
- Update opensuse keybase-client to version 6.6.3-bp160.2.1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| openSUSE:Leap 16.0 | opensuse | keybase-client |
< 6.6.3-bp160.2.1 Fix: upgrade to 6.6.3-bp160.2.1
|
Original advisory text
Security update for keybase-client
This update for keybase-client fixes the following issues:
Changes in keybase-client:
- CVE-2026-39824: failure to reject ASCII-only Punycode-encoded labels
Changes in keybase-client:
- CVE-2026-39824: failure to reject ASCII-only Punycode-encoded labels
References
Timeline
Published29 Jul 2026
Updated31 Jul 2026
First seen31 Jul 2026
Sources
openSUSE-SU-2026:21492-1 · OSV
Track software like this
Free during beta