keepassxc
2.8.0KeePassXC is a cross-platform community-driven port of the Windows application “KeePass Password Safe”.
- Maintenance
- ActiveBased on the last push: commit history is not collected yet
- License
- OtherUnknown
- Security
- 6 advisories3 medium, 3 low · Scorecard 7.5/10
- Supported versions
- No scheduleendoflife.date does not track this project
30k stars · 2k forks · 1k open issues · last release 24 days ago · data checked 48 minutes ago
Security advisories
All advisories on GitHubThe 6 most recent advisories published by the maintainers: 3 medium, 3 low. Check the patched version against the one you run.
- lowGHSA-rq29-wgrv-xgh4Sep 23, 2026Heap ouf-of-bounds via integer overflow in legacy .kdb import
- Affected
- >= 2.1.0, < 2.8.0
- Patched in
- 2.8.0
- lowGHSA-mffq-j98j-wfr2Sep 23, 2026Pageant SSH agent key sharing uses predictable shared memory name
- Affected
- >= 2.3.0, < 2.8.0
- Patched in
- 2.8.0
- mediumCVE-2026-118673Sep 23, 2026Out-of-bounds write in browser integration response encryption with oversized database responses
- Affected
- >= 2.3.0, <= 2.7.12
- Patched in
- 2.8.0
- mediumGHSA-2vm2-vmc3-vccrSep 23, 2026Browser extension allows creating references to other entries enabling limited data exfiltration
- Affected
- >= 2.3.0, < 2.8.0
- Patched in
- 2.8.0
- lowCVE-2026-69150Sep 23, 2026Heap use-after-free in KeePass1 (KDB) importer via unpruned m_entryUuids map
- Affected
- >= 2.1.0, < 2.8.0
- Patched in
- 2.8.0
- mediumCVE-2026-4158Mar 9, 2026ZDI-CAN-29156: OpenSSL config exploitation
- Affected
- >= 2.4.0, < 2.7.12
- Patched in
- 2.7.12