Description
Mellium mellium.im/xmpp 0.0.1 through 0.21.4 allows response spoofing if the implementation uses predictable IDs because the stanza type is not checked. This is fixed in 0.22.0.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Go | mellium.im/xmpp | < 0.22.0 | 0.22.0 | GHSA-98hf-m87w-cq6h |
Advisories 1
- WID-SEC-2024-3373 Ghostscript: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jun 30, 2025