-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| matrix-js-sdk | npm | < 34.3.1 | 34.3.1 |
Miggo AIRoot Cause AnalysisThe vulnerability stems from the findPredecessorRooms method in MatrixClient, which handles room predecessor traversal. The commit diff shows this function was patched by adding a seenRoomIDs Set to track visited rooms and break cycles. The vulnerability description explicitly states this function's recursion is triggered via getRoomUpgradeHistory and leaveRoomChain, but the root cause is the cycle handling in findPredecessorRooms. The file path and method name match the patched code location in the provided diff.
A Semantic Attack on Google Gemini - Read the Latest Research