Vulnerabilidades do Prosody Prosody
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Prosody Prosody: 4 registro(s), com versões afetadas e correções.cpe:2.3:a:prosody:prosody
CVE-2026-43507
Alta · 7.5
CWE-770 01/05/2026
Allocation of Resources Without Limits or Throttling em Prosody
An issue was discovered in Prosody before 0.12.6 and 1.0.0 through 13.0.0 before 13.0.5. A Denial of Service can occur via memory exhaustion caused by XML parsing resource amplification from unauthenticated connections.
CVE-2026-43506
Alta · 7.5
CWE-401 01/05/2026
Missing Release of Memory after Effective Lifetime em Prosody
An issue was discovered in Prosody before 0.12.6 and 1.0.0 through 13.0.0 before 13.0.5. A Denial of Service can occur via memory exhaustion caused by memory leaks from unauthenticated connections.
CVE-2026-43505
Média · 6.5
CWE-420 01/05/2026
An issue was discovered in Prosody before 0.12.6 and 1.0.0 through 13.0.0 before 13.0.5…
An issue was discovered in Prosody before 0.12.6 and 1.0.0 through 13.0.0 before 13.0.5, when mod_proxy65 is enabled. Because mod_proxy65 mishandles access control in the activation scenario, relaying of unauthenticated traffic can occur.
CVE-2026-43504
Média · 6.5
CWE-863 01/05/2026
Incorrect Authorization em Prosody
An issue was discovered in Prosody before 0.12.6 and 1.0.0 through 13.0.0 before 13.0.5, when mod_proxy65 is enabled. Because mod_proxy65 mishandles access control in a paused scenario, relaying of unauthenticated traffic can occur.