If you've found a security vulnerability, please report it to security@matrix.org
For more information on our security disclosure policy, visit https://www.matrix.org/security-disclosure-policy/
Security: matrix-org/matrix-appservice-bridge
Security
SECURITY.md
-
matrix-appservice-bridge doesn't verify the sub parameter of an openId token exchange, allowing unauthorized access to provisioning APIsGHSA-vc7j-h8xg-fv5x published
Aug 4, 2023 by Half-ShotModerate -
Automatic room upgrade handling can be used maliciously to bridge a room non-consentuallyGHSA-35g4-qx3c-vjhx published
Jun 16, 2021 by Half-ShotModerate
Learn more about advisories related to matrix-org/matrix-appservice-bridge in the GitHub Advisory Database