HIGH8.6PyPI
PYSEC-2026-842· CVE-2022-39254, GHSA-w4pr-4vjg-hffhWhen matrix-nio receives forwarded room keys, the receiver doesn't check if it requested the key from the forwarder
Modified: 7/7/2026
package
PyPI/matrix-nio
pkg:pypi/matrix-nio
HIGH8.6PyPI
GHSA-w4pr-4vjg-hffh· CVE-2022-39254, PYSEC-2026-842When matrix-nio receives forwarded room keys, the receiver doesn't check if it requested the key from the forwarder
Modified: 7/7/2026