Unintended Proxy or Intermediary ('Confused Deputy') and Improper Input Validation in Conduit-derived homeservers

https://github.com/continuwuity/continuwuity/security/advisories/GHSA-22fw-4jq7-g8r8