What’s Vulnerable › Products

wireapp wire-webapp vulnerabilities

8 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your wireapp wire-webapp version is affected

Latest wireapp wire-webapp vulnerabilities

• CVE-2025-48066 — wire-webapp has no database deletion on client logout (CVSS 5.5)
• CVE-2025-48061 — wire-webapp Has Insufficient Session Invalidation after User Logout (CVSS 5.6)
• CVE-2022-39380 — wire-webapp contains Improper Handling of Exceptional Conditions leading to a DoS via Markdown Rendering (CVSS 5.3)
• CVE-2022-29168 — Cross Site Scripting in Wire Messages (CVSS 6.1)
• CVE-2022-24799 — Cross Site Scripting in Wire Webapp (CVSS 6.1)
• CVE-2022-23605 — Expired Ephemeral Messages not reliably removed in wire-webapp (CVSS 2.3)
• CVE-2021-32683 — XSS through createObjectURL (CVSS 6.1)
• CVE-2021-21400 — Entering code in App Lock modal sends input to conversation (CVSS 6.5)