matrix-appservice-bridge
npm · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| matrix-appservice-bridge doesn't verify the sub parameter of an openId token exhange, allowing unauthorized access to provisioning APIs | matrix-appservice-bridge | npm | Medium | Fix reported | |
| Automatic room upgrade handling can be used maliciously to bridge a room non-consentually | matrix-appservice-bridge | npm | Medium | Fix reported |