| - module: github.com/matrix-org/gomatrixserverlib |
| - fixed: 0.0.0-20220815091947-723fd495dde8 |
| vulnerable_at: 0.0.0-20220812132423-6a49c18a298a |
| - package: github.com/matrix-org/gomatrixserverlib |
| - NewPowerLevelContentFromEvent |
| - EventsLoader.LoadAndVerify |
| - HeaderedReverseTopologicalOrdering |
| - NewPowerLevelContentFromAuthEvents |
| - ResolveStateConflictsV2 |
| - ReverseTopologicalOrdering |
| Power level parsing does not parse the "events_default" key of the |
| m.room.power_levels event, setting the event default power level to |
| zero in all cases. This can cause events to be improperly accepted or |
| rejected in rooms where the event_default power level has been changed. |
| published: 2022-08-22T18:08:50Z |
| - fix: https://github.com/matrix-org/gomatrixserverlib/commit/723fd495dde835d078b9f2074b6b62c06dea4575 |