{"api_version":"v1","generated_at":"2026-10-09T07:15:00+00:00","product":{"cve_count":2,"evidence_gap_note":"Official registry publication history is linked, but a publisher support or retirement boundary has not been established.","id":"security:cve-matrix-org-matrix-appservice-bridge-a7645871875d","lifecycle_state":"evidence_gap","linked_lifecycle_url":"https://lifecycle.blacktree.nl/libraries/npm/matrix-appservice-bridge","name":"matrix-appservice-bridge","next_cursor":null,"observations":[{"affected":">= 4.0.0, < 8.1.2; = 9.0.0","affected_versions_present":true,"cve_id":"CVE-2023-38691","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-38691","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-10-07T13:01:29.642Z","patch_url":"https://github.com/matrix-org/matrix-appservice-bridge/commit/4c6723a5e7beda65cdf1ae5dbb882e8beaac8552","primary_source":"","published":"2023-08-04T16:34:54.312Z"},{"affected":"< 2.6.1","affected_versions_present":true,"cve_id":"CVE-2021-32659","cve_url":"https://cve.blacktree.nl/cve/CVE-2021-32659","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-03T23:25:31.074Z","patch_url":"https://github.com/matrix-org/matrix-appservice-bridge/commit/b69e745584a34fcfd858df33e4631e420da07b9f","primary_source":"","published":"2021-06-16T18:45:11.000Z"}],"source_generated_at":"2026-10-08T06:18:52.353Z","vendor":"matrix-org"}}