Skip to content

Vendor

org.apache.vysper vulnerabilities

2 published CVES affecting org.apache.vysper, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
2
Critical
0
High
2
Medium
0
Low
0
Unscored
0
CISA KEV
0
Atom feed of org.apache.vysper alerts

Products

Latest org.apache.vysper CVEs

Newest publication first

  1. CVE-2026-115748 Apache Vysper: Authorization bypass

    Published
    HighCVSS 8.8 EPSS 0.61%

    UNSUPPORTED WHEN ASSIGNED Authorization bypass in Apache Vysper, all versions. Apache Vysper is an XMPP (Jabber) server library. Its XEP-0077 (In-Band Registration) implementation is missing an authentication check, allowing any authenticated user to compromise other accounts. As...

  2. CVE-2026-115721 Apache Vysper: Unbounded allocation

    Published
    HighCVSS 7.5 EPSS 0.47%

    UNSUPPORTED WHEN ASSIGNED Unbounded allocation in XML parsing in Apache Vysper; all versions, may lead to an out of memory condition. This issue affects all versions of Apache Vysper. Apache Vysper is an XMPP (Jabber) server library. As this project is retired, we do not plan to...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.