https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2026-43507.htmlhttps://patchthecve.com/cve/CVE-2026-43507.htmlWed, 17 Jun 2026 10:49:50 +0000MEDIUM 5.3: An issue was discovered in Prosody before 0.12.6 and 1.0.0 through 13.0.0 before 13.0.5. A Denial of Service can occur via memory exhaustion caused by XML parsing resource amplification from unauthenticated connections.https://patchthecve.com/cve/CVE-2026-43506.htmlhttps://patchthecve.com/cve/CVE-2026-43506.htmlWed, 17 Jun 2026 10:49:50 +0000MEDIUM 5.3: An issue was discovered in Prosody before 0.12.6 and 1.0.0 through 13.0.0 before 13.0.5. A Denial of Service can occur via memory exhaustion caused by memory leaks from unauthenticated connections.https://patchthecve.com/cve/CVE-2026-43505.htmlhttps://patchthecve.com/cve/CVE-2026-43505.htmlWed, 17 Jun 2026 10:49:50 +0000MEDIUM 6.5: An issue was discovered in Prosody before 0.12.6 and 1.0.0 through 13.0.0 before 13.0.5, when mod_proxy65 is enabled. Because mod_proxy65 mishandles access control in the activation scenario, relaying of unauthenticated traffic can occur.https://patchthecve.com/cve/CVE-2026-43504.htmlhttps://patchthecve.com/cve/CVE-2026-43504.htmlWed, 17 Jun 2026 10:49:49 +0000MEDIUM 6.5: An issue was discovered in Prosody before 0.12.6 and 1.0.0 through 13.0.0 before 13.0.5, when mod_proxy65 is enabled. Because mod_proxy65 mishandles access control in a paused scenario, relaying of unauthenticated traffic can occur.