Security: matrix-org/matrix-appservice-bridge
Security Advisories
View information about security vulnerabilities from this repository's maintainers.
-
matrix-appservice-bridge doesn't verify the sub parameter of an openId token exchange, allowing unauthorized access to provisioning APIsGHSA-vc7j-h8xg-fv5x published
Aug 4, 2023 by Half-ShotModerate -
Automatic room upgrade handling can be used maliciously to bridge a room non-consentuallyGHSA-35g4-qx3c-vjhx published
Jun 16, 2021 by Half-ShotModerate