CVE-2026-43507

概要

参考情報

• blog.unionium.org/ARTICLES/1.HTM · Third Party Advisory
• prosody.im/security/advisory_735dd9d3 · Mitigation
• openwall.com/lists/oss-security/2026/05/01/5 · Mailing List

prosody のその他の脆弱性

• CVE-2026-43506高 7.5An issue was discovered in Prosody before 0.12.6 and 1.0.0 through 13.0.0 before 13.0.5. A Denial of Service can occur via memory exhaustion…
• CVE-2026-43505中 6.5An issue was discovered in Prosody before 0.12.6 and 1.0.0 through 13.0.0 before 13.0.5, when mod_proxy65 is enabled. Because mod_proxy65 mi…
• CVE-2026-43504中 6.5An issue was discovered in Prosody before 0.12.6 and 1.0.0 through 13.0.0 before 13.0.5, when mod_proxy65 is enabled. Because mod_proxy65 mi…
• CVE-2022-0217高 7.5It was discovered that an internal Prosody library to load XML based on libexpat does not properly restrict the XML features allowed in pars…
• CVE-2021-37601高 7.5muc.lib.lua in Prosody 0.11.0 through 0.11.9 allows remote attackers to obtain sensitive information (list of admins, members, owners, and b…