matrix-org

Products

Exploited and recent CVEs

• CVE-2026-45056 Medium 6.9 Matrix Rust SDK: Sender-binding gaps in to-device and room-key attribution 0.3%
• CVE-2026-45057 Medium 4.9 matrix-sdk-ui: Incomplete edit validation 0.2%
• CVE-2026-63097 Medium 4.3 Dendrite 0.13.8 syncapi /context Endpoint Post-Leave State Exposure 0.3%
• CVE-2026-63096 Medium 5.8 Dendrite 0.13.8 SSRF via Unauthenticated Legacy Media Download Endpoint 0.3%
• CVE-2026-63095 Medium 6.5 Dendrite 0.13.8 Improper Authorization via POST account/3pid/delete Endpoint 0.3%
• CVE-2025-66622 Low 1.3 matrix-sdk-base is vulnerable to DoS via custom m.room.join_rules event values 0.4%
• CVE-2025-59160 Low 2.7 matrix-js-sdk has insufficient validation when considering a room to be upgraded by another 0.2%
• CVE-2025-59047 Low 2.7 matrix-sdk-base has panic in the `RoomMember::normalized_power_level()` method 0.4%
• CVE-2025-53549 Medium 5.2 Matrix Rust SDK allows SQL injection in the EventCache implementation 0.3%
• CVE-2025-48937 Medium 4.9 matrix-sdk-crypto vulnerable to sender of encrypted events being spoofed by homeserver administrator 0.4%
• CVE-2025-27155 Medium 6.1 In-memory stored Cross-site scripting (XSS) vulnerability in pineconesim 0.2%
• CVE-2025-27146 Low 2.7 Matrix IRC Bridge allows IRC command injection to own puppeted user 0.4%
• CVE-2025-23197 Medium 6.5 matrix-hookshot has a Potential Denial of Service when Hookshot is configured with GitHub support 0.5%
• CVE-2025-24024 Critical 9.1 Mjolnir v1.9.0 accepts commands from any room 0.6%
• CVE-2024-52594 Medium 4.3 Server-Side Request Forgery (SSRF) on redirects and federation in gomatrixserverlib 0.4%
• CVE-2024-52813 Medium 4.3 matrix-sdk-crypto missing facility to signal rotation of a verified cryptographic identity 0.5%
• CVE-2024-52505 Medium 5.4 matrix-appservice-irc allows IRC Command injection in provisioning API 0.4%
• CVE-2024-50336 Medium 5.3 matrix-js-sdk has insufficient MXC URI validation which allows client-side path traversal 0.8%
• CVE-2024-47824 High 8.7 Malicious homeservers can steal message keys when the matrix-react-sdk user invites another user to a room 0.7%
• CVE-2024-47080 High 8.7 matrix-js-sdk keys sent via `sendSharedHistoryKeys` vulnerable to interception by malicious homeserver 0.7%
• CVE-2024-42369 Medium 4.1 A room with itself as a its predecessor will freeze matrix-js-sdk 0.5%
• CVE-2024-42347 High 7.7 URL preview setting for a room is controllable by the homeserver in matrix-react-sdk 0.4%
• CVE-2024-40648 Medium 5.4 `UserIdentity::is_verified` not checking verification status of own user identity while performing the check in matrix-rust-sdk 0.3%
• CVE-2024-40640 Low 2.9 Usage of non-constant time base64 decoder could lead to leakage of secret key material in vodozemac 0.2%
• CVE-2024-39691 Medium 4.3 Malicious Matrix homeserver can leak truncated message content of messages it shouldn't have access to 0.5%
• CVE-2024-34353 Medium 5.5 matrix-sdk-crypto contains a log exposure of private key of the server-side key backup 0.2%
• CVE-2024-34063 Low 2.5 Degraded secret zeroization capabilities in vodozemac 0.1%
• CVE-2024-32000 Medium 4.3 Truncated content of messages can be leaked from matrix-appservice-irc 0.5%
• CVE-2023-43796 Medium 5.3 Synapse vulnerable to leak of remote user device information 1.2%
• CVE-2023-45129 Medium 4.9 matrix-synapse vulnerable to denial of service due to malicious server ACL events 1.4%