—
GO-2022-0952
Incorrect event parsing in github.com/matrix-org/gomatrixserverlib
Quick fix
GO-2022-0952 — github.com/matrix-org/gomatrixserverlib: upgrade to the fixed version with the command below.
go get github.com/matrix-org/gomatrixserverlib@v0.0.0-20220815091947-723fd495dde8Details
Power level parsing does not parse the "events_default" key of the m.room.power_levels event, setting the event default power level to zero in all cases. This can cause events to be improperly accepted or rejected in rooms where the event_default power level has been changed.
Are you affected?
Enter the version of the package you're using.
Affected packages
Go/github.com/matrix-org/gomatrixserverlib
Introduced in:
0Fixed in: 0.0.0-20220815091947-723fd495dde8Fix
go get github.com/matrix-org/gomatrixserverlib@v0.0.0-20220815091947-723fd495dde8