MA
Vendor
Matrix
16 products with CVEs on record
88
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2025-66622
MA
Matrix-rust-sdk
Matrix
7.5
0%
Dec 9matrix-sdk-base is vulnerable to DoS via custom m.room.join_rules event values
CVE-2025-54315
MS
Matrix specification
Matrix
7.1
0%
Oct 2The Matrix specification before 1.16 (i.e., with a room version before 12) lacks create event uniqueness
CVE-2025-49090
MS
Matrix specification
Matrix
7.1
0%
Oct 2The Matrix specification before 1.16 (i.e., with a room version before 12 and State Resolution before 2.1) has deficient state resolution
CVE-2025-30355
SY
Synapse
Matrix
7.5
1%
Mar 27Synapse is an open source Matrix homeserver implementation
CVE-2025-27146
MI
Matrix Irc Bridge
Matrix
4.3
0%
Feb 25matrix-appservice-irc is a Node.js IRC bridge for Matrix
CVE-2024-53863
SY
Synapse
Matrix
9.1
1%
Dec 3Synapse is an open-source Matrix homeserver
CVE-2024-52815
SY
Synapse
Matrix
5.3
1%
Dec 3Synapse is an open-source Matrix homeserver
CVE-2024-52805
SY
Synapse
Matrix
7.5
1%
Dec 3Synapse is an open-source Matrix homeserver
CVE-2024-37303
SY
Synapse
Matrix
5.3
0%
Dec 3Synapse is an open-source Matrix homeserver
CVE-2024-37302
SY
Synapse
Matrix
7.5
1%
Dec 3Synapse is an open-source Matrix homeserver
CVE-2024-45193
OL
Olm
Matrix
4.3
0%
Aug 22An issue was discovered in Matrix libolm through 3.2.16
CVE-2024-45192
OL
Olm
Matrix
5.3
1%
Aug 22An issue was discovered in Matrix libolm through 3.2.16
CVE-2024-45191
OL
Olm
Matrix
5.3
0%
Aug 22An issue was discovered in Matrix libolm through 3.2.16
CVE-2024-42369
JS
Javascript Sdk
Matrix
5.3
0%
Aug 20matrix-js-sdk is a Matrix messaging protocol Client-Server SDK for JavaScript
CVE-2024-42347
MA
Matrix-react-sdk
Matrix
6.5
0%
Aug 6matrix-react-sdk is a react-based SDK for inserting a Matrix chat/voip client into a web page
CVE-2024-31208
SY
Synapse
Matrix
6.5
1%
Apr 23Synapse is an open-source Matrix homeserver
CVE-2023-43796
SY
Synapse
Matrix
5.3
1%
Oct 31Synapse is an open-source Matrix homeserver Prior to versions 1.95.1 and 1.96.0rc1, cached device information of remote users can be queried from Synapse
CVE-2023-45129
SY
Synapse
Matrix
4.9
1%
Oct 10Synapse is an open-source Matrix homeserver written and maintained by the Matrix.org Foundation
CVE-2023-43656
HO
Hookshot
Matrix
9.0
0%
Sep 27matrix-hookshot is a Matrix bot for connecting to external services like GitHub, GitLab, JIRA, and more
CVE-2023-42453
SY
Synapse
Matrix
4.3
1%
Sep 27Synapse is an open-source Matrix homeserver written and maintained by the Matrix.org Foundation
CVE-2023-41335
SY
Synapse
Matrix
3.7
0%
Sep 27Synapse is an open-source Matrix homeserver written and maintained by the Matrix.org Foundation
CVE-2023-38700
MI
Matrix Irc Bridge
Matrix
3.7
1%
Aug 4matrix-appservice-irc is a Node.js IRC bridge for Matrix
CVE-2023-38691
MA
Matrix-appservice-bridge
Matrix
6.5
0%
Aug 4matrix-appservice-bridge provides an API for setting up bridges
CVE-2023-38690
MI
Matrix Irc Bridge
Matrix
9.8
1%
Aug 4matrix-appservice-irc is a Node.js IRC bridge for Matrix
CVE-2023-38686
SY
Sydent
Matrix
5.3
0%
Aug 4Sydent is an identity server for the Matrix communications protocol
CVE-2023-32683
SY
Synapse
Matrix
5.4
1%
Jun 6Synapse is a Matrix protocol homeserver written in Python with the Twisted framework
CVE-2023-32682
SY
Synapse
Matrix
5.4
1%
Jun 6Synapse is a Matrix protocol homeserver written in Python with the Twisted framework
CVE-2023-32323
SY
Synapse
Matrix
4.3
1%
May 26Synapse is an open-source Matrix homeserver written and maintained by the Matrix.org Foundation
CVE-2022-39374
SY
Synapse
Matrix
6.5
1%
May 26Synapse is an open-source Matrix homeserver written and maintained by the Matrix.org Foundation
CVE-2022-39335
SY
Synapse
Matrix
5.0
1%
May 26Synapse is an open-source Matrix homeserver written and maintained by the Matrix.org Foundation
CVE-2023-29529
JS
Javascript Sdk
Matrix
5.3
1%
Apr 14matrix-js-sdk is the Matrix Client-Server SDK for JavaScript and TypeScript
CVE-2023-28427
JS
Javascript Sdk
Matrix
8.2
1%
Mar 28matrix-js-sdk is a Matrix messaging protocol Client-Server SDK for JavaScript
CVE-2022-36060
RS
React Sdk
Matrix
5.3
1%
Mar 28matrix-react-sdk is a Matrix chat protocol SDK for React Javascript
CVE-2022-36059
JS
Javascript Sdk
Matrix
5.3
1%
Mar 28matrix-js-sdk is a Matrix messaging protocol Client-Server SDK for JavaScript
CVE-2022-41952
SY
Synapse
Matrix
5.3
1%
Nov 22Synapse before 1.52.0 with URL preview functionality enabled will attempt to generate URL previews for media stream URLs without properly limiting connection time
CVE-2022-3971
MI
Matrix Irc Bridge
Matrix
5.6
1%
Nov 13A vulnerability was found in matrix-appservice-irc up to 0.35.1
CVE-2022-39252
MA
Matrix-rust-sdk
Matrix
7.5
1%
Sep 29When matrix-rust-sdk recieves forwarded room keys, the reciever doesn't check if it requested the key from the forwarder
CVE-2022-39250
JS
Javascript Sdk
Matrix
7.5
1%
Sep 29Matrix JavaScript SDK vulnerable to key/device identifier confusion in SAS verification
CVE-2022-39257
SD
Software Development Kit
Matrix
7.5
1%
Sep 28Matrix iOS SDK allows developers to build iOS apps compatible with Matrix
CVE-2022-39255
SD
Software Development Kit
Matrix
7.5
1%
Sep 28Matrix iOS SDK allows developers to build iOS apps compatible with Matrix
CVE-2022-39251
JS
Javascript Sdk
Matrix
7.5
1%
Sep 28Matrix Javascript SDK is the Matrix Client-Server SDK for JavaScript
CVE-2022-39249
JS
Javascript Sdk
Matrix
7.5
1%
Sep 28Matrix Javascript SDK is the Matrix Client-Server SDK for JavaScript
CVE-2022-39248
SD
Software Development Kit
Matrix
7.5
1%
Sep 28matrix-android-sdk2 is the Matrix SDK for Android
CVE-2022-39246
SD
Software Development Kit
Matrix
5.3
1%
Sep 28matrix-android-sdk2 is the Matrix SDK for Android
CVE-2022-39236
JS
Javascript Sdk
Matrix
5.3
1%
Sep 28Matrix Javascript SDK is the Matrix Client-Server SDK for JavaScript
CVE-2022-39203
MI
Matrix Irc Bridge
Matrix
8.8
1%
Sep 13matrix-appservice-irc is an open source Node.js IRC bridge for Matrix
CVE-2022-39202
MI
Matrix Irc Bridge
Matrix
6.3
1%
Sep 13matrix-appservice-irc is an open source Node.js IRC bridge for Matrix
CVE-2022-39200
DE
Dendrite
Matrix
5.3
0%
Sep 12Dendrite is a Matrix homeserver written in Go
CVE-2022-31152
SY
Synapse
Matrix
7.5
1%
Sep 2Synapse is an open-source Matrix homeserver written and maintained by the Matrix.org Foundation
CVE-2022-36009
DE
Dendrite
Matrix
8.8
1%
Aug 19gomatrixserverlib is a Go library for matrix protocol federation
CVE-2022-31052
SY
Synapse
Matrix
6.5
2%
Jun 28Synapse is an open source home server implementation for the Matrix chat network
CVE-2022-29166
MI
Matrix Irc Bridge
Matrix
8.8
1%
May 5matrix-appservice-irc is a Node.js IRC bridge for Matrix
CVE-2021-44538
JS
Javascript Sdk
Matrix
9.8
2%
Dec 14The olm_session_describe function in Matrix libolm before 3.2.7 is vulnerable to a buffer overflow
CVE-2021-41281
SY
Synapse
Matrix
7.5
2%
Nov 23Synapse is a package for Matrix homeservers written in Python 3/Twisted
CVE-2021-40824
EL
Element
Matrix
5.9
1%
Sep 13A logic error in the room key sharing functionality of Element Android before 1.2.2 and matrix-android-sdk2 (aka Matrix SDK for Android) before 1.2.2 allows a malicious Matrix…
CVE-2021-40823
JS
Javascript Sdk
Matrix
5.9
1%
Sep 13A logic error in the room key sharing functionality of matrix-js-sdk (aka Matrix Javascript SDK) before 12.4.1 allows a malicious Matrix homeserver present in an encrypted room to…
CVE-2021-39164
SY
Synapse
Matrix
3.1
1%
Aug 31Matrix is an ecosystem for open federated Instant Messaging and Voice over IP
CVE-2021-39163
SY
Synapse
Matrix
3.1
1%
Aug 31Matrix is an ecosystem for open federated Instant Messaging and Voice over IP
CVE-2021-32659
MA
Matrix-appservice-bridge
Matrix
4.9
1%
Jun 16Matrix-appservice-bridge is the bridging service for the Matrix communication program's application services
CVE-2021-34813
OL
Olm
Matrix
9.8
4%
Jun 16Matrix libolm before 3.2.3 allows a malicious Matrix homeserver to crash a client (while it is attempting to retrieve an Olm encrypted room key backup from the homeserver) because…