Apache Vysper authorization bypass lets users compromise accounts
Every Vysper version lacks an XEP-0077 authentication check; Apache rates it important at CVSS 8.8 and unsupported when assigned.
Stories per day · 30 days
2 stories, newest first · one card per story
Stories tagged #apache-vysper
Apache Vysper XML parsing can exhaust memory on all versions
CVE-2026-115721 is an unauthenticated network denial of service scored CVSS 7.5; the retired project will not be fixed.