Log in Start free

Prosody

Products

ProductCVEsExploitedLatest
Prosody4–May 1, 2026

Exploited and recent CVEs

  • CVE-2026-43507 Medium 5.3 An issue was discovered in Prosody before 0.12.6 and 1.0.0 through 13.0.0 before 13.0.5. A Denial of Service can occur via memory exhaustion caused by XML parsing resource amplification from unauthent 0.3%
  • CVE-2026-43506 Medium 5.3 An issue was discovered in Prosody before 0.12.6 and 1.0.0 through 13.0.0 before 13.0.5. A Denial of Service can occur via memory exhaustion caused by memory leaks from unauthenticated connections. 0.3%
  • CVE-2026-43505 Medium 6.5 An issue was discovered in Prosody before 0.12.6 and 1.0.0 through 13.0.0 before 13.0.5, when mod_proxy65 is enabled. Because mod_proxy65 mishandles access control in the activation scenario, relaying 0.2%
  • CVE-2026-43504 Medium 6.5 An issue was discovered in Prosody before 0.12.6 and 1.0.0 through 13.0.0 before 13.0.5, when mod_proxy65 is enabled. Because mod_proxy65 mishandles access control in a paused scenario, relaying of un 0.3%