MA
Vendor
Matrix
88
CVEs
0
On KEV
0
New 30D
Products
SY9.8
Synapse
Matrix
40 CVEs0 on KEV0 new
JS9.8
Javascript Sdk
Matrix
10 CVEs0 on KEV0 new
MI9.8
Matrix Irc Bridge
Matrix
7 CVEs0 on KEV0 new
SY7.5
Sydent
Matrix
7 CVEs0 on KEV0 new
OL9.8
Olm
Matrix
5 CVEs0 on KEV0 new
SD7.5
Software Development Kit
Matrix
4 CVEs0 on KEV0 new
DE8.8
Dendrite
Matrix
2 CVEs0 on KEV0 new
EL9.8
Element
Matrix
2 CVEs0 on KEV0 new
MA6.5
Matrix-appservice-bridge
Matrix
2 CVEs0 on KEV0 new
MA7.5
Matrix-rust-sdk
Matrix
2 CVEs0 on KEV0 new
MS7.1
Matrix specification
Matrix
2 CVEs0 on KEV0 new
GO8.8
Gomatrixserverlib
Matrix
1 CVEs0 on KEV0 new
HO9.0
Hookshot
Matrix
1 CVEs0 on KEV0 new
MA5.9
Matrix-android-sdk2
Matrix
1 CVEs0 on KEV0 new
MA6.5
Matrix-react-sdk
Matrix
1 CVEs0 on KEV0 new
RS5.3
React Sdk
Matrix
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2025-66622 | MA Matrix-rust-sdk Matrix | 7.5 | Dec 9 | matrix-sdk-base is vulnerable to DoS via custom m.room.join_rules event values |
| CVE-2025-54315 | MS Matrix specification Matrix | 7.1 | Oct 2 | The Matrix specification before 1.16 (i.e., with a room version before 12) lacks create event uniqueness |
| CVE-2025-49090 | MS Matrix specification Matrix | 7.1 | Oct 2 | The Matrix specification before 1.16 (i.e., with a room version before 12 and State Resolution before 2.1) has deficient state resolution |
| CVE-2025-30355 | SY Synapse Matrix | 7.5 | Mar 27 | Synapse is an open source Matrix homeserver implementation |
| CVE-2025-27146 | MI Matrix Irc Bridge Matrix | 4.3 | Feb 25 | matrix-appservice-irc is a Node.js IRC bridge for Matrix |
| CVE-2024-53863 | SY Synapse Matrix | 9.1 | Dec 3 | Synapse is an open-source Matrix homeserver |
| CVE-2024-52815 | SY Synapse Matrix | 5.3 | Dec 3 | Synapse is an open-source Matrix homeserver |
| CVE-2024-52805 | SY Synapse Matrix | 7.5 | Dec 3 | Synapse is an open-source Matrix homeserver |
| CVE-2024-37303 | SY Synapse Matrix | 5.3 | Dec 3 | Synapse is an open-source Matrix homeserver |
| CVE-2024-37302 | SY Synapse Matrix | 7.5 | Dec 3 | Synapse is an open-source Matrix homeserver |
| CVE-2024-45193 | OL Olm Matrix | 4.3 | Aug 22 | An issue was discovered in Matrix libolm through 3.2.16 |
| CVE-2024-45192 | OL Olm Matrix | 5.3 | Aug 22 | An issue was discovered in Matrix libolm through 3.2.16 |
| CVE-2024-45191 | OL Olm Matrix | 5.3 | Aug 22 | An issue was discovered in Matrix libolm through 3.2.16 |
| CVE-2024-42369 | JS Javascript Sdk Matrix | 5.3 | Aug 20 | matrix-js-sdk is a Matrix messaging protocol Client-Server SDK for JavaScript |
| CVE-2024-42347 | MA Matrix-react-sdk Matrix | 6.5 | Aug 6 | matrix-react-sdk is a react-based SDK for inserting a Matrix chat/voip client into a web page |
| CVE-2024-31208 | SY Synapse Matrix | 6.5 | Apr 23 | Synapse is an open-source Matrix homeserver |
| CVE-2023-43796 | SY Synapse Matrix | 5.3 | Oct 31 | Synapse is an open-source Matrix homeserver Prior to versions 1.95.1 and 1.96.0rc1, cached device information of remote users can be queried from Synapse |
| CVE-2023-45129 | SY Synapse Matrix | 4.9 | Oct 10 | Synapse is an open-source Matrix homeserver written and maintained by the Matrix.org Foundation |
| CVE-2023-43656 | HO Hookshot Matrix | 9.0 | Sep 27 | matrix-hookshot is a Matrix bot for connecting to external services like GitHub, GitLab, JIRA, and more |
| CVE-2023-42453 | SY Synapse Matrix | 4.3 | Sep 27 | Synapse is an open-source Matrix homeserver written and maintained by the Matrix.org Foundation |
| CVE-2023-41335 | SY Synapse Matrix | 3.7 | Sep 27 | Synapse is an open-source Matrix homeserver written and maintained by the Matrix.org Foundation |
| CVE-2023-38700 | MI Matrix Irc Bridge Matrix | 3.7 | Aug 4 | matrix-appservice-irc is a Node.js IRC bridge for Matrix |
| CVE-2023-38691 | MA Matrix-appservice-bridge Matrix | 6.5 | Aug 4 | matrix-appservice-bridge provides an API for setting up bridges |
| CVE-2023-38690 | MI Matrix Irc Bridge Matrix | 9.8 | Aug 4 | matrix-appservice-irc is a Node.js IRC bridge for Matrix |
| CVE-2023-38686 | SY Sydent Matrix | 5.3 | Aug 4 | Sydent is an identity server for the Matrix communications protocol |
| CVE-2023-32683 | SY Synapse Matrix | 5.4 | Jun 6 | Synapse is a Matrix protocol homeserver written in Python with the Twisted framework |
| CVE-2023-32682 | SY Synapse Matrix | 5.4 | Jun 6 | Synapse is a Matrix protocol homeserver written in Python with the Twisted framework |
| CVE-2023-32323 | SY Synapse Matrix | 4.3 | May 26 | Synapse is an open-source Matrix homeserver written and maintained by the Matrix.org Foundation |
| CVE-2022-39374 | SY Synapse Matrix | 6.5 | May 26 | Synapse is an open-source Matrix homeserver written and maintained by the Matrix.org Foundation |
| CVE-2022-39335 | SY Synapse Matrix | 5.0 | May 26 | Synapse is an open-source Matrix homeserver written and maintained by the Matrix.org Foundation |
| CVE-2023-29529 | JS Javascript Sdk Matrix | 5.3 | Apr 14 | matrix-js-sdk is the Matrix Client-Server SDK for JavaScript and TypeScript |
| CVE-2023-28427 | JS Javascript Sdk Matrix | 8.2 | Mar 28 | matrix-js-sdk is a Matrix messaging protocol Client-Server SDK for JavaScript |
| CVE-2022-36060 | RS React Sdk Matrix | 5.3 | Mar 28 | matrix-react-sdk is a Matrix chat protocol SDK for React Javascript |
| CVE-2022-36059 | JS Javascript Sdk Matrix | 5.3 | Mar 28 | matrix-js-sdk is a Matrix messaging protocol Client-Server SDK for JavaScript |
| CVE-2022-41952 | SY Synapse Matrix | 5.3 | Nov 22 | Synapse before 1.52.0 with URL preview functionality enabled will attempt to generate URL previews for media stream URLs without properly limiting connection time |
| CVE-2022-3971 | MI Matrix Irc Bridge Matrix | 5.6 | Nov 13 | A vulnerability was found in matrix-appservice-irc up to 0.35.1 |
| CVE-2022-39252 | MA Matrix-rust-sdk Matrix | 7.5 | Sep 29 | When matrix-rust-sdk recieves forwarded room keys, the reciever doesn't check if it requested the key from the forwarder |
| CVE-2022-39250 | JS Javascript Sdk Matrix | 7.5 | Sep 29 | Matrix JavaScript SDK vulnerable to key/device identifier confusion in SAS verification |
| CVE-2022-39257 | SD Software Development Kit Matrix | 7.5 | Sep 28 | Matrix iOS SDK allows developers to build iOS apps compatible with Matrix |
| CVE-2022-39255 | SD Software Development Kit Matrix | 7.5 | Sep 28 | Matrix iOS SDK allows developers to build iOS apps compatible with Matrix |
| CVE-2022-39251 | JS Javascript Sdk Matrix | 7.5 | Sep 28 | Matrix Javascript SDK is the Matrix Client-Server SDK for JavaScript |
| CVE-2022-39249 | JS Javascript Sdk Matrix | 7.5 | Sep 28 | Matrix Javascript SDK is the Matrix Client-Server SDK for JavaScript |
| CVE-2022-39248 | SD Software Development Kit Matrix | 7.5 | Sep 28 | matrix-android-sdk2 is the Matrix SDK for Android |
| CVE-2022-39246 | SD Software Development Kit Matrix | 5.3 | Sep 28 | matrix-android-sdk2 is the Matrix SDK for Android |
| CVE-2022-39236 | JS Javascript Sdk Matrix | 5.3 | Sep 28 | Matrix Javascript SDK is the Matrix Client-Server SDK for JavaScript |
| CVE-2022-39203 | MI Matrix Irc Bridge Matrix | 8.8 | Sep 13 | matrix-appservice-irc is an open source Node.js IRC bridge for Matrix |
| CVE-2022-39202 | MI Matrix Irc Bridge Matrix | 6.3 | Sep 13 | matrix-appservice-irc is an open source Node.js IRC bridge for Matrix |
| CVE-2022-39200 | DE Dendrite Matrix | 5.3 | Sep 12 | Dendrite is a Matrix homeserver written in Go |
| CVE-2022-31152 | SY Synapse Matrix | 7.5 | Sep 2 | Synapse is an open-source Matrix homeserver written and maintained by the Matrix.org Foundation |
| CVE-2022-36009 | DE Dendrite Matrix | 8.8 | Aug 19 | gomatrixserverlib is a Go library for matrix protocol federation |
| CVE-2022-31052 | SY Synapse Matrix | 6.5 | Jun 28 | Synapse is an open source home server implementation for the Matrix chat network |
| CVE-2022-29166 | MI Matrix Irc Bridge Matrix | 8.8 | May 5 | matrix-appservice-irc is a Node.js IRC bridge for Matrix |
| CVE-2021-44538 | JS Javascript Sdk Matrix | 9.8 | Dec 14 | The olm_session_describe function in Matrix libolm before 3.2.7 is vulnerable to a buffer overflow |
| CVE-2021-41281 | SY Synapse Matrix | 7.5 | Nov 23 | Synapse is a package for Matrix homeservers written in Python 3/Twisted |
| CVE-2021-40824 | EL Element Matrix | 5.9 | Sep 13 | A logic error in the room key sharing functionality of Element Android before 1.2.2 and matrix-android-sdk2 (aka Matrix SDK for Android) before 1.2.2 allows a malicious Matrix… |
| CVE-2021-40823 | JS Javascript Sdk Matrix | 5.9 | Sep 13 | A logic error in the room key sharing functionality of matrix-js-sdk (aka Matrix Javascript SDK) before 12.4.1 allows a malicious Matrix homeserver present in an encrypted room to… |
| CVE-2021-39164 | SY Synapse Matrix | 3.1 | Aug 31 | Matrix is an ecosystem for open federated Instant Messaging and Voice over IP |
| CVE-2021-39163 | SY Synapse Matrix | 3.1 | Aug 31 | Matrix is an ecosystem for open federated Instant Messaging and Voice over IP |
| CVE-2021-32659 | MA Matrix-appservice-bridge Matrix | 4.9 | Jun 16 | Matrix-appservice-bridge is the bridging service for the Matrix communication program's application services |
| CVE-2021-34813 | OL Olm Matrix | 9.8 | Jun 16 | Matrix libolm before 3.2.3 allows a malicious Matrix homeserver to crash a client (while it is attempting to retrieve an Olm encrypted room key backup from the homeserver) because… |
