PR
Product
Prosody
21
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 10Medium 6Low 0
Watch
Add Prosody to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-43505 | 6.5 | May 1 | An issue was discovered in Prosody before 0.12.6 and 1.0.0 through 13.0.0 before 13.0.5, when mod_proxy65 is enabled Affected: before 0.12.6; 1.0.0 before 13.0.5 |
| CVE-2026-43504 | 6.5 | May 1 | An issue was discovered in Prosody before 0.12.6 and 1.0.0 through 13.0.0 before 13.0.5, when mod_proxy65 is enabled Affected: before 0.12.6; 1.0.0 before 13.0.5 |
| CVE-2021-32921 | 5.9 | May 13 | An issue was discovered in Prosody before 0.11.9 Affected: before 0.11.9 |
| CVE-2016-1231 | 5.9 | Jan 12 | Directory traversal vulnerability in the HTTP file-serving module (mod_http_files) in Prosody 0.9.x before 0.9.9 allows remote attackers to read arbitrary files via a Affected: 0.9.0; 0.9.1; 0.9.2; 0.9.3; 0.9.4; 0.9.5; +3 more |
| CVE-2021-32917 | 5.3 | May 13 | An issue was discovered in Prosody before 0.11.9 Affected: before 0.11.9 |
| CVE-2016-0756 | 5.3 | Jan 29 | The generate_dialback function in the mod_dialback module in Prosody before 0.9.10 does not properly separate fields when generating dialback keys, which allows remote attackers… Affected: through 0.9.9 |
Showing 6