whatstk vulnerabilities
CVEs whose affected-version data names the whatstk package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-121577Medium· 6.7Unescaped header separators in whatstk build a regular expression that backtracks exponentially
Inefficient Regular Expression Complexity (CWE-1333) in generate_regex() (whatstk/whatsapp/parser.py) in whatstk from 0.2.0 before 0.9.0 allows a party that supplies a chat export to consume the CPU of the process that parses it for an u…
▾ Sunlitlucasrodes · whatstkEPSS 0.13%via CVEORG
CVE-2026-121564Low· 1.8Silent loss of messages when merging overlapping chat exports in whatstk
Incomplete Comparison with Missing Factors (CWE-1023) in merge_chats() (whatstk/utils/chat_merge.py), reached from BaseChat.merge(), in whatstk from 0.3.0 before 0.9.0 allows a party that supplies the chat exports to cause messages to be…
▾ Sunlitlucasrodes · whatstkEPSS 0.34%via CVEORG