Threats affecting pkg:golang/mellium/im/xmpp

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	9.8	EPSS 0.6%	CVE-2024-46957xmpp · Authentication Bypass by Spoofing Critical9.8EPSS 0.6%2024-09-24CVE Database V5CVE-2024-46957 Mellium mellium.im/xmpp 0.0.1 through 0.21.4 allows response spoofing if the implementation uses predictable IDs because the stanza type is not checked. This is fixed in 0.22.0. EPSS 0.6%Vulnerability CWE-290	CVE Database V5	2024-09-24

Page 1 of 1