Skip to content
OpenAdvisories

Product · Discord

libdave

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Critical 9.4

    Improper MLS Welcome roster validation in Discord libdave allows unauthorized group membership

    Discord libdave before 1.2.0 did not reject an MLS Welcome message when the resulting group roster contained an unrecognized participant. An attacker in control of the DAVE signaling path (the voice gateway, or an equivalent position able to add, alter, or wi…