PT-2026-36481 · Prosody · Prosody

Ley · Published 2026-05-01 · Updated 2026-05-01 · CVE-2026-43506

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Prosody versions prior to 0.12.6 Prosody versions 1.0.0 through 13.0.4

Description A Denial of Service can occur due to memory exhaustion resulting from memory leaks triggered by unauthenticated connections.

Recommendations Update to version 0.12.6. Update to version 13.0.5.

Fix

DoS

Memory Leak

Weakness Enumeration

CWE-401

Related Identifiers

CVE-2026-43506

Affected Products

Prosody

References · 4

• https://openwall.com/lists/oss-security/2026/05/01/5 · Patch
• https://prosody.im/security/advisory_735dd9d3 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-43506 · Security Note
• https://twitter.com/CVEnew/status/2050254030547361948 · Twitter Post