15 matches found
CVE-2026-24471
continuwuity is a Matrix homeserver written in Rust. This vulnerability allows an attacker with a malicious remote server to cause the local server to sign an arbitrary event upon user interaction. Upon a user account leaving a room rejecting an invite, joining a room or knocking on a room, the...
CVE-2025-49090
The Matrix specification before 1.16 i.e., with a room version before 12 and State Resolution before 2.1 has deficient state resolution...
EUVD-2025-32200
Malicious code in bioql PyPI...
CVE-2025-54315
The Matrix specification before 1.16 i.e., with a room version before 12 lacks create event uniqueness...
CVE-2025-49090
The Matrix specification before 1.16 i.e., with a room version before 12 and State Resolution before 2.1 has deficient state resolution...
CVE-2025-54315
The Matrix specification before 1.16 i.e., with a room version before 12 lacks create event uniqueness...
PT-2025-40415
Name of the Vulnerable Software and Affected Versions The Matrix specification versions prior to 1.16 Description The Matrix specification, when using a room version before 12, does not ensure uniqueness of create events. Recommendations Update to version 1.16 or later...
CVE-2025-54315: Improper Enforcement of a Single, Unique Action
The Matrix specification before 1.16 i.e., with a room version before 12 lacks create event uniqueness...
CVE-2025-49090
The Matrix specification before 1.16 i.e., with a room version before 12 and State Resolution before 2.1 has deficient state resolution...
CVE-2025-54315
The Matrix specification before 1.16 i.e., with a room version before 12 lacks create event uniqueness...
CVE-2025-54315
The Matrix specification before 1.16 i.e., with a room version before 12 lacks create event uniqueness...
CVE-2025-49090
The CVE-2025-49090 entry concerns the Matrix specification prior to 1.16, specifically room version before 12 and State Resolution before 2.1, which is reported to have deficient state resolution. The issue is documented across multiple feeds (RH, OSV, NVD, CVE list, Alpine, etc.) with linked adv...
CVE-2025-49090
The Matrix specification before 1.16 i.e., with a room version before 12 and State Resolution before 2.1 has deficient state resolution...
