Matrix-Org Dendrite
4 CVEs affecting Matrix-Org Dendrite. Latest disclosed: 2026-07-17. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-39200 | High | 7.3 | 2022-09-12 | Dendrite is a Matrix homeserver written in Go. In affected versions events retrieved from a remote homeserver using the `/get_missing_events` path did not have… |
CVE-2026-63095 | Medium | 6.5 | 2026-07-17 | Dendrite through 0.13.8 contains an improper authorization vulnerability in the Matrix Client-Server API that allows any authenticated local user to delete thi… |
CVE-2026-63096 | Medium | 5.8 | 2026-07-17 | Dendrite through 0.13.8 contains a server-side request forgery vulnerability that allows unauthenticated attackers to cause the server to open outbound TLS con… |
CVE-2026-63097 | Medium | 4.3 | 2026-07-17 | Dendrite through 0.13.8 contains an improper access control vulnerability in the syncapi /context endpoint (syncapi/routing/context.go) that allows authenticat… |