Apache Vysper

Mentions · 7d0
Mentions · 30d2
All mentions2
First seenOct 23, 2026
Last mentioned7d ago

Timeline

2 articles · newest first

Apache Vysper authorization bypass lets users compromise accounts

Every Vysper version lacks an XEP-0077 authentication check; Apache rates it important at CVSS 8.8 and unsupported when assigned.

oss-securityOct 23, 13:51 UTC · 7d agoVulnerabilityCVE-2026-1157481

Apache Vysper XML parsing can exhaust memory on all versions

CVE-2026-115721 is an unauthenticated network denial of service scored CVSS 7.5; the retired project will not be fixed.

oss-securityOct 23, 13:48 UTC · 7d agoVulnerabilityCVE-2026-115721

Related CVEs

by mentions

CVE-2026-1157488.8
Authorization bypass in Apache Vysper In-Band Registration
published 4d agoApache Vysper
CVE-2026-1157217.5
Unbounded XML allocation DoS in Apache Vysper (all versions)
published 4d agoApache Vysper

Appears with

Apachevendor · 2

Entities are extracted by the model from each article. First seen Oct 23, 2026, last mentioned 7d ago. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.