CVE-2021-41055: Gajim

High severity, CVSS 7.5. EPSS: 1.6% chance of exploitation in the next 30 days.

Gajim 1.2.x and 1.3.x before 1.3.3 allows remote attackers to cause a denial of service (crash) via a crafted XMPP Last Message Correction (XEP-0308) message in multi-user chat, where the message ID equals the correction ID.

Affected products

• Gajim Gajim: from 1.2.0, before 1.3.3 (fixed in 1.3.3)

Published 2021-10-11. Last modified 2026-06-17.