CVE-2026-43504

Prosody has a vulnerability CVE-2026-43504 in which the mod_proxy65 module mishandles access control in a paused state, allowing relaying of unauthenticated traffic. Affected versions are Prosody before 0.12.6 and 1.0.0 up to 13.0.0, with fixes in 13.0.5 and later. The issue is due to incorrect a...