< 2.0.22
2.0.22
Cryptocat before 2.0.22 has Remote Denial of Service via username
Running one of these products? Scan your site to see whether it exposes a vulnerable version.