Skip to content
OpenAdvisories

Product · Matrix

dendrite

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 4.3
    CVE-2026-63097

    Dendrite 0.13.8 syncapi /context Endpoint Post-Leave State Exposure

    Dendrite through 0.13.8 contains an improper access control vulnerability in the syncapi /context endpoint (syncapi/routing/context.go) that allows authenticated local users to access post-leave room state events by exploiting a flawed membership check that e…

    Matrix dendrite
  • Medium 5.8
    CVE-2026-63096

    Dendrite 0.13.8 SSRF via Unauthenticated Legacy Media Download Endpoint

    Dendrite through 0.13.8 contains a server-side request forgery vulnerability that allows unauthenticated attackers to cause the server to open outbound TLS connections to arbitrary hosts and ports by supplying an unvalidated serverName parameter to the legacy…

    Matrix dendrite
  • Medium 6.5
    CVE-2026-63095

    Dendrite 0.13.8 Improper Authorization via POST account/3pid/delete Endpoint

    Dendrite through 0.13.8 contains an improper authorization vulnerability in the Matrix Client-Server API that allows any authenticated local user to delete third-party identifier bindings belonging to other users by submitting an arbitrary address and medium …

    Matrix dendrite