GoKawiilMolly, a Signal messaging fork, goes three months without a security update
Molly, an Android fork of the Signal messenger popular for extra privacy and security features, has reportedly not received an update in roughly three months, leaving known vulnerabilities unpatched. The issue was raised in a community post warning users that the app may currently be exposed to security risks it was originally designed to avoid.
GoKawiil's interpretation of the reporting above, not reported fact.
Forks like Molly depend on small volunteer teams to keep pace with upstream Signal changes and emerging security patches, so a prolonged gap could leave users' messages less protected than they expect. This case illustrates a broader risk for privacy-focused open-source forks: without steady maintenance, tools built to enhance security can end up undermining it.
- Molly, a privacy-focused Signal fork for Android, has reportedly gone about three months without an update.
- The lapse has left the app with unpatched known vulnerabilities, according to the report.
- The situation highlights the maintenance risks facing community-run forks of major secure messaging apps.
Source: piefed.world, 2026-10-31
Published there as: “Molly (Signal fork) has not been updated since 3 months and is vulnerable”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.