home / advisories
Security advisories
Published GitHub security advisories and releases whose notes mention a security fix, for the Monero software we track on releases. Collected automatically once a day. Subscribe: RSS · JSON.
| Date | Project | Advisory | Severity |
|---|---|---|---|
| 2026-11-04 | Cake Wallet | App PIN lock is not enforced after backgrounding while the in-app browser is open ## Summary The app lock fails open when the in-app browser is open. Backgrounding and reopening the app skips the PIN prompt entirely, exposing wallet transaction data to anyone holding an unlocked phone — even with "Req... github.com/cake-tech/cake_wallet/security/advisories/GHSA-329m-5v92-587r |
Low |
| 2026-10-31 | Cake Wallet | Cake Wallet v6.5.2: release notes mention a security fix The release notes for this version mention security. Read them and update if you run this software. github.com/cake-tech/cake_wallet/releases/tag/v6.5.2 |
– |
| 2026-10-29 | RetoSwap (Haveno) | RetoSwap (Haveno) v1.12.0-reto: release notes mention a security fix The release notes for this version mention security. Read them and update if you run this software. github.com/retoaccess1/haveno-reto/releases/tag/v1.12.0-reto |
– |
| 2026-10-29 | BTCPay Server | BTCPay Server v2.4.7: release notes mention a security fix The release notes for this version mention security. Read them and update if you run this software. github.com/btcpayserver/btcpayserver/releases/tag/v2.4.7 |
– |
| 2026-09-04 | Cake Wallet | ERC-681 chain ID is dropped before send, allowing payment requests to execute on the wrong EVM network Coordination note: I sent this same report to [email protected] on July 25, 2026. I am duplicating it here only through Cake Wallet's preferred private GitHub Security Advisory channel. Please treat the email and t... github.com/cake-tech/cake_wallet/security/advisories/GHSA-695v-fhpj-fv8x |
Medium |
| 2026-06-13 | P2Pool | Critical P2Pool security update ## TL;DR A serious bug was found in P2Pool. **Please upgrade your P2Pool to the latest release and restart it as soon as possible.** - **Your Monero and your wallet keys are safe.** Nobody can steal your coins or your ke... github.com/SChernykh/p2pool/security/advisories/GHSA-fm6j-gf38-p925 |
Critical |
sponsors
Apple Bitcoin· Bitgolder· Cake Wallet· PayAIwithCrypto· Coincards· Mullvad· Swapnoir· CryptoGPUs· Bull Miners· Trocador· WizardSwap· Xeovo VPN