Matrix-Org / Dendrite

4 CVEs

CVE ID	Description	Severity	CVSS	Published
CVE-2026-63097	Dendrite 0.13.8 syncapi /context Endpoint Post-Leave State Exposure	MEDIUM	5.3	Jul 17, 2026
CVE-2026-63096	Dendrite 0.13.8 SSRF via Unauthenticated Legacy Media Download Endpoint	MEDIUM	6.9	Jul 17, 2026
CVE-2026-63095	Dendrite 0.13.8 Improper Authorization via POST account/3pid/delete Endpoint	HIGH	7.1	Jul 17, 2026
CVE-2022-39200	Signature checks not applied to some retrieved missing events	HIGH	7.3	Sep 12, 2022

Rows per page

Showing 1 to 4 of 4 CVEs