Vulnerabilities > Mellium > Xmpp > 0.19.0

DATE CVE VULNERABILITY TITLE RISK
2022-02-11 CVE-2022-24968 Improper Certificate Validation vulnerability in Mellium Xmpp
In Mellium mellium.im/xmpp through 0.21.0, an attacker capable of spoofing DNS TXT records can redirect a WebSocket connection request to a server under their control without causing TLS certificate verification to fail.
network
mellium CWE-295
4.3