Log in Start free

Matrix

Products

ProductCVEsExploitedLatest
Tafnit v84–Jul 30, 2024
Matrix specification2–Oct 2, 2025

Exploited and recent CVEs

  • CVE-2025-54315 High 7.1 The Matrix specification before 1.16 (i.e., with a room version before 12) lacks create event uniqueness. 0.3%
  • CVE-2025-49090 High 7.1 The Matrix specification before 1.16 (i.e., with a room version before 12 and State Resolution before 2.1) has deficient state resolution. 0.5%
  • CVE-2024-38432 Medium 5.5 Matrix – Tafnit v8 CWE-646: Reliance on File Name or Extension of Externally-Supplied File 0.2%
  • CVE-2024-38431 Medium 5.3 Matrix Tafnit v8 - CWE-204: Observable Response Discrepancy 0.4%
  • CVE-2024-38430 Medium 5.4 Matrix - CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') 0.3%
  • CVE-2024-38429 High 7.5 Matrix - CWE-552: Files or Directories Accessible to External Parties 0.4%