Read the docs

strophe

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

strophe records in CISA KEV

No strophe vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2026-76191 CVE-2026-112063 · GHSA-37wj-432m-6r6f

Stack-based buffer overflow in libstrophe via oversized SCRAM salt

Priority MEDIUM 60

libstrophe through 0.14.0 contains a stack-based buffer overflow vulnerability in SCRAM_Hi that allows malicious XMPP servers to overflow a 128-byte stack buffer by sending an oversized SCRAM salt.

CVSS 4.0MEDIUM 6.0 Network No auth User interaction EPSS 0.00283 Published 2026-10-18 No fix listed CWE-121
Open these records in search →