Pexip Infinity prior to 27.3 allows remote malicious users to trigger a software abort, and possibly enumerate usernames, via One Touch Join.
pexip pexip infinity