bucktrix (>=0.1.4, <=0.1.5), lokiunimore (>=0.1.0, <=0.5.1) +8 more potentially affected by CVE-2022-39254 via matrix-nio (>=0.6.0, <=0.19.0)

matrix-nio PYPI version =0.6.0, =0.1.4, =0.1.0, =0.2.3, =3.0.0, =0.9.0, =5.6.7, =2.0.0, =2.8.0 Source cves: CVE-2022-39254 Source advisory: OSV:PYSEC-2026-842...

CVE-2022-39254

creationtimestamp| type| source ---|---|--- 2022-09-29 18:35:07+00:00| seen| https://t.me/cibsecurity/50733 2026-07-13 23:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mqksn3yxp725...

CVE-2022-39254 When matrix-nio receives forwarded room keys, the receiver doesn't check if it requested the key from the forwarder

matrix-nio is a Python Matrix client library, designed according to sans I/O principles. Prior to version 0.20, when a users requests a room key from their devices, the software correctly remember the request. Once they receive a forwarded room key, they accept it without checking who the room ke...

CVE-2022-39254 When matrix-nio receives forwarded room keys, the receiver doesn't check if it requested the key from the forwarder

matrix-nio is a Python Matrix client library, designed according to sans I/O principles. Prior to version 0.20, when a users requests a room key from their devices, the software correctly remember the request. Once they receive a forwarded room key, they accept it without checking who the room ke...

CVE-2022-39254

CVE-2022-39254 affects matrix-nio (Python Matrix client library). Before v0.20, when a user requests a room key from their devices, forwarded room keys could be accepted without verifying the origin, enabling a potential impersonation attack if a homeserver inserts a questionable key. The issue i...

CVE-2022-39254 When matrix-nio receives forwarded room keys, the receiver doesn't check if it requested the key from the forwarder

matrix-nio is a Python Matrix client library, designed according to sans I/O principles. Prior to version 0.20, when a users requests a room key from their devices, the software correctly remember the request. Once they receive a forwarded room key, they accept it without checking who the room ke...