Molly Signal fork unpatched, vulnerable
The gist
A post says Signal fork Molly has gone about 3 months without updates, missing fixes in Signal 8.27.1.
Users of the privacy-focused fork must weigh switching to mainline Signal.
How it unfolded
- Jul 31, 2026Molly's latest release was Version v8.19.2-4.
- Oct 22, 2026A PrivacyGuides news item disclosed a Signal vulnerability allowing audio and possibly video to continue after hanging up.
- Oct 31, 2026A post said Molly had not been updated in about 3 months and remains vulnerable to attacks fixed in mainline Signal.