| Package | Affected versions | Patched versions |
|---|---|---|
| gajim | ≤ 0.16.7 |
Gajim through 0.16.7 unconditionally implements the "XEP-0146: Remote Controlling Clients" extension. This can be abused by malicious XMPP servers to, for example, extract plaintext from OTR encrypted sessions.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free