Dependency on Vulnerable Third-Party Component

Overview matrix-nio is an A Python Matrix client library, designed according to sans I/O principles. Affected versions of this package are vulnerable to Dependency on Vulnerable Third-Party Component due to the use of a deprecated cryptographic dependency, which introduces multiple cryptographic...

3x-ui-manage-keys (0.4.0), bucktrix (>=0.1.4, <=0.1.5) +22 more potentially affected by unknown CVE via matrix-nio (>=0.6.0, <=0.25.2)

matrix-nio PYPI version =0.6.0, =0.1.4, =0.1.1, =0.0.6, =0.0.1, =0.0.1, =4.1.5, =0.1.0, =0.2.0a0, =0.2.3, =1.0.0, =1.5.0a0 and more Source cves: unknown CVE Source advisory: SNYK:PYTHON-MATRIXNIO-18507998...

PYSEC-2026-842 When matrix-nio receives forwarded room keys, the receiver doesn't check if it requested the key from the forwarder

When matrix-nio before 0.20 requests a room key from our devices, it correctly accepts key forwards only if they are a response to a previous request. However, it doesn't check that the device that responded matches the device the key was requested from. This allows a malicious homeserver to inse...

When matrix-nio receives forwarded room keys, the receiver doesn't check if it requested the key from the forwarder

When matrix-nio before 0.20 requests a room key from our devices, it correctly accepts key forwards only if they are a response to a previous request. However, it doesn't check that the device that responded matches the device the key was requested from.This allows a malicious homeserver to inser...

bucktrix (>=0.1.4, <=0.1.5), lokiunimore (>=0.1.0, <=0.5.1) +8 more potentially affected by CVE-2022-39254 via matrix-nio (>=0.6.0, <=0.19.0)

matrix-nio PYPI version =0.6.0, =0.1.4, =0.1.0, =0.2.3, =3.0.0, =0.9.0, =5.6.7, =2.0.0, =2.8.0 Source cves: CVE-2022-39254 Source advisory: OSV:PYSEC-2026-842...

Linux Distros Unpatched Vulnerability : CVE-2022-39254

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - matrix-nio is a Python Matrix client library, designed according to sans I/O principles. Prior to version 0.20, when a users requests a room key from their...

CVE-2022-39254

matrix-nio is a Python Matrix client library, designed according to sans I/O principles. Prior to version 0.20, when a users requests a room key from their devices, the software correctly remember the request. Once they receive a forwarded room key, they accept it without checking who the room ke...

When matrix-nio receives forwarded room keys, the receiver doesn't check if it requested the key from the forwarder

When matrix-nio before 0.20 requests a room key from our devices, it correctly accepts key forwards only if they are a response to a previous request. However, it doesn't check that the device that responded matches the device the key was requested from. This allows a malicious homeserver to inse...

GHSA-W4PR-4VJG-HFFH When matrix-nio receives forwarded room keys, the receiver doesn't check if it requested the key from the forwarder

When matrix-nio before 0.20 requests a room key from our devices, it correctly accepts key forwards only if they are a response to a previous request. However, it doesn't check that the device that responded matches the device the key was requested from. This allows a malicious homeserver to inse...

bucktrix (>=0.1.4, <=0.1.5), lokiunimore (>=0.1.0, <=0.5.1) +8 more potentially affected by CVE-2022-39254 via matrix-nio (>=0.6.0, <=0.19.0)

matrix-nio PYPI version =0.6.0, =0.1.4, =0.1.0, =0.2.3, =3.0.0, =0.9.0, =5.6.7, =2.0.0, =2.8.0 Source cves: CVE-2022-39254 Source advisory: GHSA-W4PR-4VJG-HFFH...

bucktrix (>=0.1.4, <=0.1.5), lokiunimore (>=0.1.0, <=0.5.1) +8 more potentially affected by CVE-2022-39254 via matrix-nio (>=0.6.0, <=0.19.0)

matrix-nio PYPI version =0.6.0, =0.1.4, =0.1.0, =0.2.3, =3.0.0, =0.9.0, =5.6.7, =2.0.0, =2.8.0 Source cves: CVE-2022-39254 Source advisory: OSV:GHSA-W4PR-4VJG-HFFH...

DEBIAN-CVE-2022-39254

matrix-nio is a Python Matrix client library, designed according to sans I/O principles. Prior to version 0.20, when a users requests a room key from their devices, the software correctly remember the request. Once they receive a forwarded room key, they accept it without checking who the room ke...

CVE-2022-39254

matrix-nio is a Python Matrix client library, designed according to sans I/O principles. Prior to version 0.20, when a users requests a room key from their devices, the software correctly remember the request. Once they receive a forwarded room key, they accept it without checking who the room ke...

CVE-2022-39254

matrix-nio is a Python Matrix client library, designed according to sans I/O principles. Prior to version 0.20, when a users requests a room key from their devices, the software correctly remember the request. Once they receive a forwarded room key, they accept it without checking who the room ke...

Design/Logic Flaw

matrix-nio is a Python Matrix client library, designed according to sans I/O principles. Prior to version 0.20, when a users requests a room key from their devices, the software correctly remember the request. Once they receive a forwarded room key, they accept it without checking who the room ke...

CVE-2022-39254

CVE-2022-39254 affects matrix-nio (Python Matrix client library). Before v0.20, when a user requests a room key from their devices, forwarded room keys could be accepted without verifying the origin, enabling a potential impersonation attack if a homeserver inserts a questionable key. The issue i...

CVE-2022-39254 When matrix-nio receives forwarded room keys, the receiver doesn't check if it requested the key from the forwarder

matrix-nio is a Python Matrix client library, designed according to sans I/O principles. Prior to version 0.20, when a users requests a room key from their devices, the software correctly remember the request. Once they receive a forwarded room key, they accept it without checking who the room ke...

CVE-2022-39254

matrix-nio is a Python Matrix client library, designed according to sans I/O principles. Prior to version 0.20, when a users requests a room key from their devices, the software correctly remember the request. Once they receive a forwarded room key, they accept it without checking who the room ke...

CVE-2022-39254 When matrix-nio receives forwarded room keys, the receiver doesn't check if it requested the key from the forwarder

matrix-nio is a Python Matrix client library, designed according to sans I/O principles. Prior to version 0.20, when a users requests a room key from their devices, the software correctly remember the request. Once they receive a forwarded room key, they accept it without checking who the room ke...

CVE-2022-39254 When matrix-nio receives forwarded room keys, the receiver doesn't check if it requested the key from the forwarder

matrix-nio is a Python Matrix client library, designed according to sans I/O principles. Prior to version 0.20, when a users requests a room key from their devices, the software correctly remember the request. Once they receive a forwarded room key, they accept it without checking who the room ke...