Launchpad.net

CVE 2018-17613

Telegram Desktop (aka tdesktop) 1.3.16 alpha, when "Use proxy" is enabled, sends credentials and application data in cleartext over the SOCKS5 protocol.

See the CVE page on Mitre.org for more details.