{"action":"Upgrade mellium.im/xmpp to 0.22.0 or later.","affected":[{"fixed":"0.22.0","introduced":"0"}],"component":"mellium.im/xmpp","cve_ids":["CVE-2024-46957"],"ecosystem":"Go","epss":0.00612,"exploited":false,"fixed_versions":["0.22.0"],"ghsa_id":"GHSA-98hf-m87w-cq6h","id":"tcs_01M5KG5ECHAV1CB2ATG1Z1ZTJW","modified_at":"2026-03-03T04:55:49.268517Z","published_at":"2024-09-26T18:24:03Z","references":["https://osv.dev/vulnerability/GO-2024-3157","https://github.com/advisories/GHSA-98hf-m87w-cq6h","https://nvd.nist.gov/vuln/detail/CVE-2024-46957","https://codeberg.org/mellium/xmpp/releases","https://codeberg.org/mellium/xmpp/releases/tag/v0.22.0","https://mellium.im/cve/cve-2024-46957"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2024-3157","url":"https://osv.dev/vulnerability/GO-2024-3157"}],"summary":"Mellium allows Authentication Bypass by Spoofing in mellium.im/xmpp"}