org.apache.vysper:vysper vulnerabilities
CVEs whose affected-version data names the org.apache.vysper:vysper package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-115748High· 8.8Apache Vysper: Authorization bypass
**UNSUPPORTED WHEN ASSIGNED** Authorization bypass in Apache Vysper, all versions. Apache Vysper is an XMPP (Jabber) server library. Its XEP-0077 (In-Band Registration) implementation is missing an authentication check, allowing any…
▾ TwilightApache Software Foundation · org.apache.vysper:vysperEPSS 0.61%via CVEORG
CVE-2026-115721High· 7.5Apache Vysper: Unbounded allocation
**UNSUPPORTED WHEN ASSIGNED** Unbounded allocation in XML parsing in Apache Vysper; all versions, may lead to an out of memory condition. This issue affects all versions of Apache Vysper. Apache Vysper is an XMPP (Jabber) server lib…
▾ TwilightApache Software Foundation · org.apache.vysper:vysperEPSS 0.47%via CVEORG