Prosody vulnerabilities

Products

• Prosody 21

Newest

• prosody An issue was discovered in Prosody before 0.12.6 and 1.0.0 through 13.0.0 before 13.0.5. A Denial... CVE-2026-43507 Fix available 5.3 MediumMay 1, 2026
• prosody An issue was discovered in Prosody before 0.12.6 and 1.0.0 through 13.0.0 before 13.0.5. A Denial... CVE-2026-43506 Fix available 5.3 MediumMay 1, 2026
• prosody An issue was discovered in Prosody before 0.12.6 and 1.0.0 through 13.0.0 before 13.0.5, when... CVE-2026-43505 Fix available 6.5 MediumMay 1, 2026
• prosody An issue was discovered in Prosody before 0.12.6 and 1.0.0 through 13.0.0 before 13.0.5, when... CVE-2026-43504 Fix available 6.5 MediumMay 1, 2026
• prosody prosody - security update CVE-2022-0217 Fix available 7.5 HighJanuary 14, 2022
• prosody muc.lib.lua in Prosody 0.11.0 through 0.11.9 allows remote attackers to obtain sensitive... CVE-2021-37601 Fix available 7.5 HighJuly 28, 2021
• prosody, debian linux, fedoraproject fedora +2 more An issue was discovered in Prosody before 0.11.9. It does not use a constant-time algorithm for... CVE-2021-32921 Fix available 5.9 MediumMay 13, 2021
• prosody, debian linux, fedoraproject fedora +2 more Prosody before 0.11.9 allows Uncontrolled CPU Consumption via a flood of SSL/TLS renegotiation... CVE-2021-32920 Fix available 7.5 HighMay 13, 2021
• prosody, debian linux, fedoraproject fedora +2 more An issue was discovered in Prosody before 0.11.9. The undocumented dialback_without_dialback... CVE-2021-32919 Fix available 7.5 HighMay 13, 2021
• prosody, debian linux, fedoraproject fedora +2 more An issue was discovered in Prosody before 0.11.9. Default settings are susceptible to remote... CVE-2021-32918 Fix available 7.5 HighMay 13, 2021
• prosody, debian linux, fedoraproject fedora +2 more An issue was discovered in Prosody before 0.11.9. The proxy65 component allows open access by... CVE-2021-32917 Fix available 5.3 MediumMay 13, 2021
• debian linux, prosody mod auth ldap, mod auth ldap2 +2 more The mod_auth_ldap and mod_auth_ldap2 Community Modules through 2020-01-27 for Prosody... CVE-2020-8086 Fix available 9.8 CriticalJanuary 28, 2020
• [unknown] prosody prosody before versions 0.10.2, 0.9.14 is vulnerable to an Authentication Bypass. Prosody did not... CVE-2018-10847 Fix available 4.2 MediumJune 2, 2018
• prosody, debian linux +1 more Prosody before 0.10.0 allows remote attackers to cause a denial of service (application crash),... CVE-2017-18265 Fix available 7.5 HighMay 9, 2018
• prosody The generate_dialback function in the mod_dialback module in Prosody before 0.9.10 does not... CVE-2016-0756 Fix available 5.3 MediumJanuary 29, 2016
• prosody, debian linux, fedoraproject fedora +2 more The mod_dialback module in Prosody before 0.9.9 does not properly generate random values for the... CVE-2016-1232 Fix available 7.5 HighJanuary 10, 2016
• prosody, debian linux, fedoraproject fedora +2 more Directory traversal vulnerability in the HTTP file-serving module (mod_http_files) in Prosody 0.9... CVE-2016-1231 Fix available 5.9 MediumJanuary 10, 2016
• prosody Prosody before 0.9.4 does not properly restrict the processing of compressed XML elements, which... CVE-2014-2745 Fix available 7.8 HighApril 6, 2014
• lightwitch metronome, prosody +1 more plugins/mod_compression.lua in (1) Prosody before 0.9.4 and (2) Lightwitch Metronome through 3.4... CVE-2014-2744 Fix available 7.8 HighApril 6, 2014
• prosody The json.decode function in util/json.lua in Prosody 0.8.x before 0.8.1 might allow remote... CVE-2011-2532 Fix available 5.0 MediumJune 22, 2011
• prosody Prosody 0.8.x before 0.8.1, when MySQL is used, assigns an incorrect data type to the value... CVE-2011-2531 Fix available 4.3 MediumJune 22, 2011
• prosody Prosody before 0.8.1 does not properly detect recursion during entity expansion, which allows... CVE-2011-2205 Fix available 5.0 MediumJune 22, 2011