matrix-org matrix-appservice-bridge

• CVE-2023-38691 Medium 5.0 matrix-appservice-bridge doesn't verify the sub parameter of an openId token exhange, allowing unauthorized access to provisioning APIs 0.5%
• CVE-2021-32659 Medium 6.5 Automatic room upgrade handling can be used maliciously to bridge a room non-consentually 0.9%