matrix gomatrixserverlib vulnerabilities

Latest matrix gomatrixserverlib CVEs

Newest publication first

1. CVE-2022-36009 Incorrect parsing of access level in gomatrixserverlib and dendrite

   Published 2022-08-19

   High·CVSS 8.8 EPSS 0.86%

   gomatrixserverlib is a Go library for matrix protocol federation. Dendrite is a Matrix homeserver written in Go, an alternative to Synapse. The power level parsing within gomatrixserverlib was failing to parse the "events_default" key of the m.room.power_levels event, defaulting...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.