Skip to content
OpenAdvisories

Package · Go

github.com/matrix-org/dendrite

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.3
    CVE-2022-39200

    Signature checks not applied to some retrieved missing events

    Dendrite is a Matrix homeserver written in Go. In affected versions events retrieved from a remote homeserver using the `/get_missing_events` path did not have their signatures verified correctly. This could potentially allow a remote homeserver to provide in…

    matrix-org dendrite github.com/matrix-org/dendrite dendrite Alpine Go