Threats tagged 'ghsa-8hhg-crp9-v482'

A security vulnerability (CVE-2026-7701) exists in Telegram Desktop versions up to 6.7.5 in the Bot API component. The flaw is a null pointer dereference caused by manipulation of the login_url argument in the RequestButton function. This vulnerability can be triggered remotely and has been publicly disclosed. The vendor has not responded or provided a fix. The CVSS score is 4.3, indicating medium severity with impact limited to availability.