CRITICAL9.8Go
GHSA-98hf-m87w-cq6h· CVE-2024-46957, GO-2024-3157Mellium allows Authentication Bypass by Spoofing
Modified: 9/26/2024
package
Go/mellium.im/xmpp
pkg:go/mellium.im/xmpp
MEDIUM5.9Go
GHSA-h289-x5wc-xcv8· CVE-2022-24968, GHSA-m658-p24x-p74rImproper Validation of Certificate with Host Mismatch in mellium.im/xmpp/websocket
Modified: 5/20/2024
—Go
GO-2022-0370· CVE-2022-24968, GHSA-h289-x5wc-xcv8Man-in-the-middle attack due to improper validation of certificate in mellium.im/xmpp
Modified: 5/20/2024
—Go
GO-2024-3157· CVE-2024-46957, GHSA-98hf-m87w-cq6hMellium allows Authentication Bypass by Spoofing in mellium.im/xmpp
Modified: 3/3/2026