CVE-2021-21387: Cleartext Transmission of Sensitive Information

Wrongthink peer-to-peer, end-to-end encrypted messenger with PeerJS and Axolotl ratchet. In wrongthink from version 2.0.0 and before 2.3.0 there was a set of vulnerabilities causing inadequate encryption strength. Part of the secret identity key was disclosed by the fingerprint used for connectio...

PT-2021-14467

Name of the Vulnerable Software and Affected Versions Wrongthink versions 2.0.0 through 2.2.x Description The issue concerns inadequate encryption strength in the Wrongthink peer-to-peer, end-to-end encrypted messenger. Part of the secret identity key was disclosed by the fingerprint used for...