matrix-org dendrite

• CVE-2026-63097 Medium 4.3 Dendrite 0.13.8 syncapi /context Endpoint Post-Leave State Exposure 0.3%
• CVE-2026-63096 Medium 5.8 Dendrite 0.13.8 SSRF via Unauthenticated Legacy Media Download Endpoint 0.3%
• CVE-2026-63095 Medium 6.5 Dendrite 0.13.8 Improper Authorization via POST account/3pid/delete Endpoint 0.3%
• CVE-2022-39200 High 7.3 Signature checks not applied to some retrieved missing events 0.4%