← Database

CVE-2024-46957

CRITICAL CVSS: 9.8 Published: 2024-09-25 Modified: 2026-06-17

Description

Mellium mellium.im/xmpp 0.0.1 through 0.21.4 allows response spoofing if the implementation uses predictable IDs because the stanza type is not checked. This is fixed in 0.22.0.

Affected Platforms

Unknown

Weakness Type

CWE-290

References