td vulnerabilities

1 known vulnerability in td from Gotd. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  td: Allocation of Resources Without Limits or Throttling

  CVE-2026-54638Jul 28, 2026Gotd

  gotd/td is a T Telegram MTProto API client in Go. Prior to 0.145.1, proto.UnencryptedMessage.Decode in proto/unencrypted_message.go read attacker controlled dataLen from an unauthenticated MTProto unencrypted packet and allocated make([]byte, dataLen) before c