VYPR

td

by Gotd

CVEs (1)

  • CVE-2026-54638Jul 28, 2026
    risk 0.00cvss epss 0.00

    gotd/td is a T Telegram MTProto API client in Go. Prior to 0.145.1, proto.UnencryptedMessage.Decode in proto/unencrypted_message.go read attacker controlled dataLen from an unauthenticated MTProto unencrypted packet and allocated make([]byte, dataLen) before checking the…