Skip to content
OpenAdvisories

Package · npm

whatsapp-api-js

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Medium 5.8
    CVE-2024-45607 EPSS 14%

    whatsapp-api-js fails to validate message's signature

    whatsapp-api-js is a TypeScript server agnostic Whatsapp's Official API framework. It's possible to check the payload validation using the WhatsAppAPI.verifyRequestSignature and expect false when the signature is valid. Incorrect Access Control, anyone using …

    Secreto31126 whatsapp-api-js whatsapp-api-js npm