libdave vulnerabilities
1 known vulnerability in libdave from Discord. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
1critical
0high
0exploited
9.4average CVSS score
Latest first
- 9.4 Critical severity
libdave: Detection of Error Condition Without Action
Discord libdave before 1.2.0 did not reject an MLS Welcome message when the resulting group roster contained an unrecognized participant. An attacker in control of the DAVE signaling path (the voice gateway, or an equivalent position able to add, alter, or wit