Skip to content
OpenAdvisories

Package · Alpine

dendrite

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Medium 4.3
    CVE-2024-52594

    Server-Side Request Forgery (SSRF) on redirects and federation in gomatrixserverlib

    Gomatrixserverlib is a Go library for matrix federation. Gomatrixserverlib is vulnerable to server-side request forgery, serving content from a private network it can access, under certain conditions. The commit `c4f1e01` fixes this issue. Users are advised t…

    matrix-org gomatrixserverlib github.com/matrix-org/gomatrixserverlib dendrite Alpine Go
  • High 7.3
    CVE-2022-39200

    Signature checks not applied to some retrieved missing events

    Dendrite is a Matrix homeserver written in Go. In affected versions events retrieved from a remote homeserver using the `/get_missing_events` path did not have their signatures verified correctly. This could potentially allow a remote homeserver to provide in…

    matrix-org dendrite github.com/matrix-org/dendrite dendrite Alpine Go