PR
Product
Prosody
21
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 10Medium 6Low 0
Watch
Add Prosody to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-10847 | 8.8 | Jul 30 | prosody before versions 0.10.2, 0.9.14 is vulnerable to an Authentication Bypass Affected: before 0.9.14; 0.10.0; 0.10.1 |
| CVE-2026-43507 | 7.5 | May 1 | An issue was discovered in Prosody before 0.12.6 and 1.0.0 through 13.0.0 before 13.0.5 Affected: before 0.12.6; 1.0.0 before 13.0.5 |
| CVE-2026-43506 | 7.5 | May 1 | An issue was discovered in Prosody before 0.12.6 and 1.0.0 through 13.0.0 before 13.0.5 Affected: before 0.12.6; 1.0.0 before 13.0.5 |
| CVE-2022-0217 | 7.5 | Aug 26 | It was discovered that an internal Prosody library to load XML based on libexpat does not properly restrict the XML features allowed in parsed XML data Affected: before 0.11.12 |
| CVE-2021-37601 | 7.5 | Jul 30 | muc.lib.lua in Prosody 0.11.0 through 0.11.9 allows remote attackers to obtain sensitive information (list of admins, members, owners, and banned entities of a Multi-User chat… Affected: 0.11.0 through 0.11.9 |
| CVE-2021-32920 | 7.5 | May 13 | Prosody before 0.11.9 allows Uncontrolled CPU Consumption via a flood of SSL/TLS renegotiation requests Affected: before 0.11.9 |
| CVE-2021-32919 | 7.5 | May 13 | An issue was discovered in Prosody before 0.11.9 Affected: 0.10.0 before 0.11.9 |
| CVE-2021-32918 | 7.5 | May 13 | An issue was discovered in Prosody before 0.11.9 Affected: before 0.11.9 |
| CVE-2017-18265 | 7.5 | May 9 | Prosody before 0.10.0 allows remote attackers to cause a denial of service (application crash), related to an incompatibility with certain versions of the LuaSocket library, such… Affected: before 0.10.0 |
| CVE-2016-1232 | 7.5 | Jan 12 | The mod_dialback module in Prosody before 0.9.9 does not properly generate random values for the secret token for server-to-server dialback authentication, which makes it easier… Affected: through 0.9.8; 0.9.0; 0.9.1; 0.9.2; 0.9.3; 0.9.4; +3 more |
Showing 10