github.com/matrix-org/dendrite

2 results · Feed

• High 7.3
  CVE-2022-39200

  Signature checks not applied to some retrieved missing events

  Dendrite is a Matrix homeserver written in Go. In affected versions events retrieved from a remote homeserver using the `/get_missing_events` path did not have their signatures verified correctly. This could potentially allow a remote homeserver to provide in…

  matrix-org dendrite github.com/matrix-org/dendrite dendrite Alpine Go
  Sep 12, 2022
• Medium 5.0
  CVE-2022-36009

  Incorrect parsing of access level in gomatrixserverlib and dendrite

  gomatrixserverlib is a Go library for matrix protocol federation. Dendrite is a Matrix homeserver written in Go, an alternative to Synapse. The power level parsing within gomatrixserverlib was failing to parse the `"events_default"` key of the `m.room.power_l…

  matrix-org gomatrixserverlib github.com/matrix-org/dendrite github.com/matrix-org/gomatrixserverlib Go
  Aug 19, 2022