Donasako

**Name of the Vulnerable Software and Affected Versions** stoatchat versions prior to 0.15.0 **Description** A missing authorization issue exists in the Subscribe message handler. Authenticated attackers can enumerate members and monitor profile updates of private servers they are not members of. By sending a Subscribe message containing an arbitrary server ID, an attacker can subscribe to a server's member-update topic and receive live UserUpdate events, which include display names, avatars, and status changes. **Recommendations** Update stoatchat to version 0.15.0 or later.

**Name of the Vulnerable Software and Affected Versions** stoatchat versions prior to 0.15.0 **Description** An issue exists where the SSRF (Server-Side Request Forgery) blocklist fails to block the IPv6 unspecified address (::). This allows unauthenticated attackers to bypass protections using the '/proxy' and '/embed' endpoints. By crafting requests with IPv6 literal syntax, attackers can access services on the loopback interface to retrieve sensitive internal content. **Recommendations** Update to version 0.15.0 or later. Restrict access to the '/proxy' and '/embed' endpoints as a temporary mitigation measure.