{"action":"Upgrade mellium.im/xmpp to 0.22.0 or later.","affected":[{"fixed":"0.22.0","introduced":"0"}],"component":"mellium.im/xmpp","cve_ids":["CVE-2024-46957"],"ecosystem":"Go","epss":0.00612,"exploited":false,"fixed_versions":["0.22.0"],"ghsa_id":"GHSA-98hf-m87w-cq6h","id":"tcs_01M5KF54WXN9QTFM1VNMNYWZ5T","modified_at":"2024-09-26T18:57:34.088004Z","published_at":"2024-09-25T03:30:36Z","references":["https://osv.dev/vulnerability/GHSA-98hf-m87w-cq6h","https://nvd.nist.gov/vuln/detail/CVE-2024-46957","https://codeberg.org/mellium/xmpp","https://codeberg.org/mellium/xmpp/releases","https://codeberg.org/mellium/xmpp/releases/tag/v0.22.0","https://mellium.im/cve/cve-2024-46957"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-98hf-m87w-cq6h","url":"https://osv.dev/vulnerability/GHSA-98hf-m87w-cq6h"}],"summary":"Mellium allows Authentication Bypass by Spoofing"}