matrix-appservice-bridge vulnerabilities (npm)
2 vulnerabilities.
-
matrix-appservice-bridgenpm matrix-appservice-bridge doesn't verify the sub parameter of an openId token exhange, allowing unauthorized access to provisioning APIs 5.0 Medium -
matrix-appservice-bridgenpm Automatic room upgrade handling can be used maliciously to bridge a room non-consentually 6.5 Medium