---
title: Molly(Signal fork) has not been updated since 3 months and is vulnerable
link: https://piefed.world/post/1503394
source: hnrss-org
published: 2026-10-31T10:23:41Z
updated: 2026-10-31T10:23:41Z
first_seen: 2026-10-31T15:15:45.849013716Z
authors:
- DeepLogin
content: extracted
html: 2026-10-31-molly-signal-fork-has-not-been-updated-since-3-months-and.html
remote_preview:
  url: https://piefed.world/static/images/piefed_logo_full_t_300x300.svg
---

cross-posted from: [https://piefed.world/c/ysk/p/1503393/ysk-molly-signal-fork-has-not-been-updated-since-3-months-and-is-vulnerable-to-attacks-f](https://piefed.world/c/ysk/p/1503393/ysk-molly-signal-fork-has-not-been-updated-since-3-months-and-is-vulnerable-to-attacks-f)

As of now, Molly [lastest release](https://github.com/mollyim/mollyim-android/releases) was in 31 July (Version v8.19.2-4).

It contains vulnerabilities that had been simply fixed in mainline Signal.

Take for example the [latest exploit disclosed in October](https://www.privacyguides.org/news/2026/10/22/signal-vulnerability-allow-audio-and-possibly-video-to-continue-after-hanging-up/), it has been fixed in Signal 8.27. [1](https://aboutsignal.com/news/signal-fixes-bug-that-could-affect-ending-calls-on-android/). Meanwhile Molly remains vulnerable.

It’s currently recommended to use mainline Signal and delete Molly till they at least return to updating their app adequately, if they ever will.