| Package | Affected versions | Patched versions |
|---|---|---|
| telegram | < 5.11.0 | 5.11.0 |
The "delete for" feature in Telegram before 5.11 on Android does not delete shared media files from the Telegram Images directory. In other words, there is a potentially misleading UI indication that a sender can remove a recipient's copy of a previously sent image (analogous to supported functionality in which a sender can remove a recipient's copy of a previously sent message).
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free