Matrix ≫ Dendrite

2 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.

5.3

CVE-2022-39200

EPSS 0.16%
Published 12.09.2022 20:15:12
Last modified 21.11.2024 07:17:46

Dendrite is a Matrix homeserver written in Go. In affected versions events retrieved from a remote homeserver using the `/get_missing_events` path did not have their signatures verified correctly. This could potentially allow a remote homeserver to p...

8.8

CVE-2022-36009

EPSS 0.62%
Published 19.08.2022 21:15:08
Last modified 21.11.2024 07:12:10

gomatrixserverlib is a Go library for matrix protocol federation. Dendrite is a Matrix homeserver written in Go, an alternative to Synapse. The power level parsing within gomatrixserverlib was failing to parse the `"events_default"` key of the `m.roo...