| Package | Affected versions | Patched versions |
|---|---|---|
| private messenger | ≤ 4.59.0 | |
| signal | ≤ 3.8.1.5 |
Signal Private Messenger Android v4.59.0 and up and iOS v3.8.1.5 and up allows a remote non-contact to ring a victim's Signal phone and disclose currently used DNS server due to ICE Candidate handling before call is answered or declined.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free