Skip to content
Matrix vulnerabilities
Newest
-
matrix matrix-rust-sdk
matrix-sdk-base is vulnerable to DoS via custom m.room.join_rules event values
CVE-2025-66622
Fix available
1.3 Low
-
matrix specification
The Matrix specification before 1.16 (i.e., with a room version before 12) lacks create event...
CVE-2025-54315
7.1 High
-
matrix specification
The Matrix specification before 1.16 (i.e., with a room version before 12 and State Resolution...
CVE-2025-49090
Fix available
7.1 High
-
element-hq synapse
Synapse vulnerable to federation denial of service via malformed events
CVE-2025-30355
Fix available
7.1 High
-
matrix irc bridge, matrix-org matrix-appservice-irc +1 more
Matrix IRC Bridge allows IRC command injection to own puppeted user
CVE-2025-27146
Fix available
2.7 Low
-
element-hq synapse
Synapse unauthenticated writes to the media repository allow planting of problematic content
CVE-2024-37303
Fix available
5.3 Medium
-
element-hq synapse
Synapse denial of service through media disk space consumption
CVE-2024-37302
Fix available
7.5 High
-
element-hq synapse
Synapse allows unsupported content types to lead to memory exhaustion
CVE-2024-52805
Fix available
8.2 High
-
element-hq synapse
Synapse allows a a malformed invite to break the invitee's `/sync`
CVE-2024-52815
Fix available
8.7 High
-
element-hq synapse
Synapse can be forced to thumbnail unexpected file formats, invoking external, potentially untrustworthy decoders
CVE-2024-53863
Fix available
8.2 High
-
matrix olm
An issue was discovered in Matrix libolm (aka Olm) through 3.2.16. There is Ed25519 signature...
CVE-2024-45193
4.3 Medium
-
matrix olm
An issue was discovered in Matrix libolm (aka Olm) through 3.2.16. Cache-timing attacks can occur...
CVE-2024-45192
5.3 Medium
-
matrix olm
An issue was discovered in Matrix libolm (aka Olm) through 3.2.16. The AES implementation is...
CVE-2024-45191
5.3 Medium
-
matrix-org matrix-js-sdk, matrix javascript sdk +1 more
A room with itself as a its predecessor will freeze matrix-js-sdk
CVE-2024-42369
Fix available
4.1 Medium
-
matrix matrix-react-sdk
URL preview setting for a room is controllable by the homeserver in matrix-react-sdk
CVE-2024-42347
Fix available
7.7 High
-
matrix tafnit v8, matrix-globalservices tafnit +1 more
Matrix – Tafnit v8 CWE-646: Reliance on File Name or Extension of Externally-Supplied File
CVE-2024-38432
5.5 Medium
-
matrix tafnit v8, matrix-globalservices tafnit +1 more
Matrix Tafnit v8 - CWE-204: Observable Response Discrepancy
CVE-2024-38431
5.3 Medium
-
matrix tafnit v8, matrix-globalservices tafnit +1 more
Matrix - CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-38430
5.4 Medium
-
matrix tafnit v8, matrix-globalservices tafnit +1 more
Matrix - CWE-552: Files or Directories Accessible to External Parties
CVE-2024-38429
7.5 High
-
element-hq synapse, fedoraproject fedora +1 more
Synapse's V2 state resolution weakness allows DoS from remote room members
CVE-2024-31208
Fix available
6.5 Medium
-
element-hq synapse, fedoraproject fedora +1 more
Synapse vulnerable to leak of remote user device information
CVE-2023-43796
Fix available
5.3 Medium
-
element-hq synapse, fedoraproject fedora +1 more
matrix-synapse vulnerable to denial of service due to malicious server ACL events
CVE-2023-45129
Fix available
4.9 Medium
-
matrix hookshot, matrix-org matrix-hookshot +1 more
Sandbox escape for instances that have enabled transformation functions in matrix-hookshot
CVE-2023-43656
5.6 Medium
-
element-hq synapse, fedoraproject fedora +1 more
Improper validation of receipts allows forged read receipts in matrix synapse
CVE-2023-42453
Fix available
3.1 Low
-
element-hq synapse, fedoraproject fedora +1 more
Temporary storage of plaintext passwords during password changes in matrix synapse
CVE-2023-41335
Fix available
3.7 Low
-
matrix irc bridge, matrix-org matrix-appservice-irc +1 more
matrix-appservice-irc events can be crafted to leak parts of targeted messages from other bridged rooms
CVE-2023-38700
Fix available
3.5 Low
-
matrix matrix-appservice-bridge
matrix-appservice-bridge doesn't verify the sub parameter of an openId token exhange, allowing unauthorized access to provisioning APIs
CVE-2023-38691
Fix available
5.0 Medium
-
matrix irc bridge, matrix-org matrix-appservice-irc +1 more
matrix-appservice-irc IRC command injection via admin commands containing newlines
CVE-2023-38690
Fix available
5.8 Medium
-
matrix sydent
Sydent does not verify email server certificates
CVE-2023-38686
Fix available
9.3 Critical
-
element-hq synapse
URL deny list bypass via oEmbed and image URLs when generating previews in Synapse
CVE-2023-32683
Fix available
3.5 Low
-
element-hq synapse
Improper checks for deactivated users during login in synapse
CVE-2023-32682
Fix available
5.4 Medium
-
element-hq synapse
Synapse Outgoing federation to specific hosts can be disabled by sending malicious invites
CVE-2023-32323
Fix available
5.0 Medium
-
element-hq synapse
Synapse Denial of service due to incorrect application of event authorization rules during state resolution
CVE-2022-39374
Fix available
6.5 Medium
-
element-hq synapse
Synapse does not apply enough checks to servers requesting auth events of events in a room
CVE-2022-39335
Fix available
5.0 Medium
-
matrix-org matrix-js-sdk, matrix javascript sdk +1 more
matrix-js-sdk vulnerable to invisible eavesdropping in group calls
CVE-2023-29529
Fix available
5.0 Medium
-
matrix-org matrix-js-sdk, matrix javascript sdk +1 more
Prototype pollution in matrix-js-sdk
CVE-2023-28427
Fix available
8.2 High
-
matrix-org matrix-react-sdk, matrix react sdk +1 more
Prototype pollution in matrix-react-sdk
CVE-2022-36060
Fix available
8.2 High
-
matrix-org matrix-appservice-irc, matrix irc bridge +1 more
matrix-appservice-irc PgDataStore.ts sql injection
CVE-2022-3971
Fix available
4.6 Medium
-
matrix matrix-rust-sdk
When matrix-rust-sdk recieves forwarded room keys, the reciever doesn't check if it requested the key from the forwarder
CVE-2022-39252
Fix available
8.6 High
-
matrix javascript sdk, matrix-org matrix-js-sdk +1 more
Matrix JavaScript SDK vulnerable to key/device identifier confusion in SAS verification
CVE-2022-39250
Fix available
8.6 High
-
matrix-org matrix-ios-sdk, matrix software development kit +1 more
Matrix iOS SDK vulnerable to impersonation via forwarded Megolm sessions
CVE-2022-39257
7.5 High
-
matrix-org matrix-ios-sdk, matrix software development kit +1 more
Matrix iOS SDK vulnerable ton Olm/Megolm protocol confusion
CVE-2022-39255
8.6 High
-
matrix-org matrix-android-sdk2, matrix software development kit +1 more
matrix-android-sdk2 vulnerable to Olm/Megolm protocol confusion
CVE-2022-39248
Fix available
8.6 High
-
matrix-org matrix-android-sdk2, matrix software development kit +1 more
matrix-android-sdk2 vulnerable to impersonation via forwarded Megolm sessions
CVE-2022-39246
Fix available
7.5 High
-
matrix javascript sdk, matrix-org matrix-js-sdk +1 more
Matrix Javascript SDK vulnerable to Olm/Megolm protocol confusion
CVE-2022-39251
Fix available
8.6 High
-
matrix javascript sdk, matrix-org matrix-js-sdk +1 more
Matrix Javascript SDK vulnerable to impersonation via forwarded Megolm sessions
CVE-2022-39249
Fix available
7.5 High
-
matrix javascript sdk, matrix-org matrix-js-sdk +1 more
Matrix Javascript SDK improper beacon events can cause availability issues
CVE-2022-39236
Fix available
4.3 Medium
-
matrix irc bridge, matrix-org matrix-appservice-irc +1 more
Parsing issue in matrix-org/node-irc leading to room takeovers
CVE-2022-39203
Fix available
8.8 High
-
matrix irc bridge, matrix-org matrix-appservice-irc +1 more
IRC mode parameter confusion in matrix-appservice-irc
CVE-2022-39202
Fix available
4.3 Medium
-
matrix dendrite
Signature checks not applied to some retrieved missing events
CVE-2022-39200
Fix available
7.3 High
- Show olderLoading…