Skip to content
OpenAdvisories

Package · npm

baileys

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Critical 9.3
    CVE-2026-48063

    Baileys has message upsert / hist sync spoofing and app state corruption when using maliciously crafted protocolMessage payload

    Baileys is a cocket-based TS/JavaScript API for WhatsApp Web. In versions prior to both 6.7.22 and 7.0.0-rc12, any Baileys session can be sent a malicious payload via the placeholderResendMessage and trigger a fake messages.upsert event with a fake message ke…

    WhiskeySockets @whiskeysockets/baileys Baileys baileys npm