Apache Vysper vulnerabilities

2 known vulnerabilities in Apache Vysper from Apache. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  Apache Vysper: Authorization Bypass Through User-Controlled Key

  CVE-2026-115748Oct 26, 2026Apache

  **UNSUPPORTED WHEN ASSIGNED** Authorization bypass in Apache Vysper, all versions. Apache Vysper is an XMPP (Jabber) server library. Its XEP-0077 (In-Band Registration) implementation is missing an authentication check, allowing any authenticated user to compr

• 7.5 High severity

  Apache Vysper: Allocation of Resources Without Limits or Throttling

  CVE-2026-115721Oct 26, 2026Apache

  **UNSUPPORTED WHEN ASSIGNED** Unbounded allocation in XML parsing in Apache Vysper; all versions, may lead to an out of memory condition. This issue affects all versions of Apache Vysper. Apache Vysper is an XMPP (Jabber) server library. As this project is ret