Apache Vysper (Apache Software Foundation) - vulnerabilities (CVEs)

2 CVEs, 2 in the last 30 days, 1 known versions, newest CVE from 2026-10-26. Vendor: Apache Software Foundation.

CVEs of Apache Vysper

• CVE-2026-115748 - CVSS 8.8 (high), 2026-10-26: **UNSUPPORTED WHEN ASSIGNED**  Authorization bypass in Apache Vysper, all versions. Apache Vysper is an XMPP (Jabber) server library. Its XEP-0077 (In-Band…
• CVE-2026-115721 - CVSS 7.5 (high), 2026-10-26: **UNSUPPORTED WHEN ASSIGNED**  Unbounded allocation in XML parsing in Apache Vysper; all versions, may lead to an out of memory condition. This issue affects…