Citi Bike
- Known vulnerabilities
- 0
- Still open
- 0
- KEV open
- 0
- Max CVSS (historical)
- —
Cumulative exposure
Low
Aggregates open CVEs (40%) + KEV (30%) + critical shared permissions (15%) + trackers (10%) + OS EOL (5%). Higher score = more exposed.
-
Open CVEs +0/+50
0 open CVEs, max CVSS 0.0, EPSS 0%
-
Active KEVs +0/+35
0 CISA KEVs still open
-
Permissions +0/+10
0 critical shared permission(s)
-
Trackers +0/+8
0 identification/profiling tracker(s)
-
EOL OS +0/+5
Installed OS is end-of-life
Based on permissions only: no CVE data referenced for this app.
Known vulnerabilities (CVE)
No CVE is currently referenced in NVD for this app on its platform.
The absence of CVEs is not a security guarantee — it can also mean nobody has audited or published findings.
Context
Context
Description
The official app for Citi Bike, NYC’s bike share system. Citi Bike consists of a fleet of specially designed, sturdy and durable bikes that are locked into a network of docking stations throughout the city. Our bikes can be unlocked from one station and returned to any other station in the system, making them ideal for one-way trips. Bike share is a greener, healthier way to get around — whether you’re commuting, running errands, meeting friends, or exploring in a new city. The Citi Bike app gives you access to thousands of bikes in your area — unlock and pay directly from the app and get going. The Citi Bike app also shows upcoming public transit departures, including MTA subway trains, shuttles, local, limited, & express buses, LIRR commuter rail trains, Metro-North commuter rail trains, PATH rapid transit trains, Bee-Line local & express buses, NYC Ferries, the Staten Island Ferry, the AirTrain JFK, the AirTrain Newark, the Roosevelt Island Tramway, and NJT commuter rail trains, light rail trains, & buses. Within the app, you can purchase the following Citi Bike passes: Single ride Access pass Membership Happy riding!
Data collected and shared
Source: App Store · App Privacy · 11 data item(s) declared
Indicative classification based on data sensitivity. "Shared" = transmitted to third parties (publisher-declared).
Other apps by this publisher
Apps published by Lyft Bikes and Scooters, LLC
FAQ
FAQ: Citi Bike
Why are no CVEs listed for Citi Bike?
No CVE is currently referenced in NVD for Citi Bike (com.citibikenyc.citibike) with a iOS CPE configuration. Either none has been publicly disclosed, or none has been mapped yet. Absence of a CVE is not a security guarantee.
What is the latest known version of Citi Bike?
The most recent version of Citi Bike (com.citibikenyc.citibike) tracked by Appaloosa Scout is 2026.28.3, published by Lyft Bikes and Scooters, LLC.