FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

conduit -- e2ee signing keys vulnerability

Affected packages
matrix-conduit < 0.10.16

Details

VuXML ID 05286f93-de01-11f1-bbb3-901b0e9408dc
Discovery 2026-11-10
Entry 2026-11-11

Conduit team reports:

Fixes a vulnerability where E2EE signing keys could be accepted from servers other than the one the user belongs to. It is recommended you upgrade ASAP.

References

URL https://gitlab.com/famedly/conduit/-/releases/v0.10.16