Machine-written summary
Summary written by Claude Haiku from the source advisory. Not reviewed by a person.
GHSA-wchh-9x6h-7f6p concerns matrix-commander up to and including 8.0.6, which depends on the libolm library and is affected by its known vulnerabilities, including CVE-2022-39255 and CVE-2024-45193. The source gives few details on how an attacker would exploit them, and no fixed version of matrix-commander is listed. The source recommends using the Rust alternative, matrix-commander-rs, instead, since the Python version is considered cryptographically unsafe until a fix is merged upstream.
Not analysed yet
We haven’t published our analysis of this Advisory yet. Once a person has reviewed it, this page will say what’s vulnerable, what has to be true for your app to be affected, and how to check.
Severity and exploitation
No source has published a CVSS score for this record yet.
- CISA KEV Not listed.
- EPSS No score.
Timeline
- 31 Oct 2026, 14:41 UTC First seen by agentprime
- 31 Oct 2026, 14:41 UTC Confirmed by OSV
Sources
- GitHub Advisory Database: GHSA-wchh-9x6h-7f6p
- OSV: GHSA-wchh-9x6h-7f6p
- github.com/8go/matrix-commander/security/advisories/GHSA-wchh-9x6h-7f6p
- github.com/8go/matrix-commander/issues/204#issuecomment-3523986979
- github.com/matrix-nio/matrix-nio/pull/555
- github.com/matrix-nio/matrix-nio/commit/71a1c808bc2ae6ea2a6e8effa7c11bd09796c626
- github.com/8go/matrix-commander