CVE-2026-48063
2 advisories.
npm/baileys CVE-2026-48063: critical, EPSS 0.22%
Baileys has message upsert / hist sync spoofing and app state corruption when using maliciously crafted protocolMessage payload
Action: Upgrade baileys to 6.7.22 or later.
npm i baileys@6.7.22npm i baileys@7.0.0-rc12Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 6.7.22 | - |
| 7.0.0-rc.1 | 7.0.0-rc12 | - |
Fixed versions
| 6.7.22 | 7.0.0-rc12 |
Sources
- osv: GHSA-qvv5-jq5g-4cgg
- https://github.com/WhiskeySockets/Baileys/security/advisories/GHSA-qvv5-jq5g-4cgg
- https://github.com/WhiskeySockets/Baileys/commit/3beb08eecfcb4e65722e674034bd84fb11a9de35
- https://github.com/WhiskeySockets/Baileys
CVE-2026-48063 · published · modified · JSON
npm/@whiskeysockets/baileys CVE-2026-48063: critical, EPSS 0.22%
Baileys has message upsert / hist sync spoofing and app state corruption when using maliciously crafted protocolMessage payload
Action: Upgrade @whiskeysockets/baileys to 6.7.22 or later.
npm i @whiskeysockets/baileys@6.7.22npm i @whiskeysockets/baileys@7.0.0-rc12Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 6.7.22 | - |
| 7.0.0-rc.1 | 7.0.0-rc12 | - |
Fixed versions
| 6.7.22 | 7.0.0-rc12 |
Sources
- osv: GHSA-qvv5-jq5g-4cgg#npm/@whiskeysockets/baileys
- https://github.com/WhiskeySockets/Baileys/security/advisories/GHSA-qvv5-jq5g-4cgg
- https://github.com/WhiskeySockets/Baileys/commit/3beb08eecfcb4e65722e674034bd84fb11a9de35
- https://github.com/WhiskeySockets/Baileys
CVE-2026-48063 · published · modified · JSON