VYPR

Chat Server

by Vartalap

CVEs (1)

  • CVE-2022-31013CriMay 31, 2022
    risk 0.59cvss 9.1epss 0.01

    Chat Server is the chat server for Vartalap, an open-source messaging application. Versions 2.3.2 until 2.6.0 suffer from a bug in validating the access token, resulting in authentication bypass. The function `this.authProvider.verifyAccessKey` is an async function, as the code…