Apache Vysper authorization bypass lets users compromise accounts
Every Vysper version lacks an XEP-0077 authentication check; Apache rates it important at CVSS 8.8 and unsupported when assigned.
2 stories, newest first · one card per story
Every Vysper version lacks an XEP-0077 authentication check; Apache rates it important at CVSS 8.8 and unsupported when assigned.
CVE-2026-115721 is an unauthenticated network denial of service scored CVSS 7.5; the retired project will not be fixed.
Today 1.2K readers · 1.9K views · 1.5K reads · all time 160K views