matrix-org

Records116All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical8CVSS 9.0–10.0

CVSS high42CVSS 7.0–8.9

Exploited now

matrix-org records in CISA KEV

No matrix-org vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Synapse 40 records MEDIUM Javascript Sdk 10 records MEDIUM Matrix Irc Bridge 7 records MEDIUM Sydent 7 records HIGH Olm 5 records MEDIUM Software Development Kit 4 records MEDIUM Dendrite 2 records MEDIUM Element 2 records MEDIUM

Records

116 records

TI-2023-20035 CVE-2023-38686 · GHSA-p6hw-wm59-3g5g

Sydent does not verify email server certificates

HIGH 75

Sydent is an identity server for the Matrix communications protocol.

CVSS 3.1CRITICAL 9.3 Adjacent network No auth No interaction EPSS 0.00265 Published 2023-08-04 Fixed in 2.5.6 CWE-295

TI-2026-45046 CVE-2026-63096 · GHSA-jrcq-4ccj-6fr8

Dendrite 0.13.8 SSRF via Unauthenticated Legacy Media Download Endpoint

HIGH 70

Dendrite through 0.13.8 contains a server-side request forgery vulnerability that allows unauthenticated attackers to cause the server to open outbound TLS connections to arbitrary hosts and ports by supplying an unvalid…

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00335 Published 2026-07-17 No fix listed CWE-918

TI-2026-45045 CVE-2026-63095 · GHSA-35h8-2q42-v6f5

Dendrite 0.13.8 Improper Authorization via POST account/3pid/delete Endpoint

MEDIUM 64

Dendrite through 0.13.8 contains an improper authorization vulnerability in the Matrix Client-Server API that allows any authenticated local user to delete third-party identifier bindings belonging to other users by subm…

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00296 Published 2026-07-17 No fix listed CWE-639

TI-2026-45047 CVE-2026-63097 · GHSA-xq7h-2f2w-f2xq

Dendrite 0.13.8 syncapi /context Endpoint Post-Leave State Exposure

MEDIUM 57

Dendrite through 0.13.8 contains an improper access control vulnerability in the syncapi /context endpoint (syncapi/routing/context.go) that allows authenticated local users to access post-leave room state events by expl…

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00267 Published 2026-07-17 No fix listed CWE-863

TI-2023-15617 CVE-2023-32323 · GHSA-f3wc-3vxv-xmvr

Synapse Outgoing federation to specific hosts can be disabled by sending malicious invites

MEDIUM 56

Synapse is an open-source Matrix homeserver written and maintained by the Matrix.org Foundation.

CVSS 3.1MEDIUM 5.0 Network Low privileges No interaction EPSS 0.00981 Published 2023-05-26 Fixed in 1.74.0 CWE-20

TI-2023-20039 CVE-2023-38690 · GHSA-3pmj-jqqp-2mj3

matrix-appservice-irc IRC command injection via admin commands containing newlines

MEDIUM 50

matrix-appservice-irc is a Node.js IRC bridge for Matrix.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00863 Published 2023-08-04 Fixed in 1.0.1 CWE-20

TI-2021-13807 CVE-2021-34813 · GHSA-269w-9hm6-g22q

Matrix libolm before 3.2.3 allows a malicious Matrix homeserver to crash a client (while…

MEDIUM 49

Matrix libolm before 3.2.3 allows a malicious Matrix homeserver to crash a client (while it is attempting to retrieve an Olm encrypted room key backup from the homeserver) because olm_pk_decrypt has a stack-based buffer…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04262 Published 2021-06-16 No fix listed CWE-787

TI-2025-17791 CVE-2025-24024

Mjolnir v1.9.0 accepts commands from any room

MEDIUM 46

Mjolnir is a moderation tool for Matrix.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.0062 Published 2025-01-21 No fix listed CWE-671

TI-2022-18627 CVE-2022-39251 · GHSA-r48r-j8fx-mq2c

Matrix Javascript SDK vulnerable to Olm/Megolm protocol confusion

MEDIUM 46

Matrix Javascript SDK is the Matrix Client-Server SDK for JavaScript.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.01176 Published 2022-09-28 Partial fix · 19.7.0 CWE-287

TI-2022-18626 CVE-2022-39250 · GHSA-5w8r-8pgj-5jmf

Matrix JavaScript SDK vulnerable to key/device identifier confusion in SAS verification

MEDIUM 46

Matrix JavaScript SDK is the Matrix Client-Server software development kit (SDK) for JavaScript.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.01186 Published 2022-09-29 Partial fix · 19.7.0 CWE-287

TI-2021-20136 CVE-2021-44538 · GHSA-q7f4-j236-f4hc

The olm_session_describe function in Matrix libolm before 3.2.7 is vulnerable to a buffer…

MEDIUM 46

The olm_session_describe function in Matrix libolm before 3.2.7 is vulnerable to a buffer overflow.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02001 Published 2021-12-14 No fix listed CWE-119

TI-2024-32091 CVE-2024-47824 · GHSA-qcvh-p9jq-wp8v

Malicious homeservers can steal message keys when the matrix-react-sdk user invites another user to a room

MEDIUM 45

matrix-react-sdk is react-based software development kit for inserting a Matrix chat/VOIP client into a web page.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00656 Published 2024-10-15 Fixed in 3.102.0 CWE-200

TI-2022-18631 CVE-2022-39255

Matrix iOS SDK vulnerable ton Olm/Megolm protocol confusion

MEDIUM 45

Matrix iOS SDK allows developers to build iOS apps compatible with Matrix.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.01025 Published 2022-09-28 Fixed in 0.23.19 CWE-287

TI-2022-18624 CVE-2022-39248 · GHSA-fpgf-pjjv-2qgm

matrix-android-sdk2 vulnerable to Olm/Megolm protocol confusion

MEDIUM 45

matrix-android-sdk2 is the Matrix SDK for Android.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00996 Published 2022-09-28 Fixed in 1.5.1 CWE-287

TI-2024-35327 CVE-2024-52815 · GHSA-f3r3-h2mq-hx2h

Synapse allows a a malformed invite to break the invitee's `/sync`

MEDIUM 44

Synapse is an open-source Matrix homeserver.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.0057 Published 2024-12-03 Fixed in 1.120.1 CWE-20

TI-2023-12971 CVE-2023-28427 · GHSA-mwq8-fjpf-c2gr

Prototype pollution in matrix-js-sdk

MEDIUM 44

matrix-js-sdk is a Matrix messaging protocol Client-Server SDK for JavaScript.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.01185 Published 2023-03-28 Partial fix · 24.0.0 CWE-1321

TI-2022-18628 CVE-2022-39252 · GHSA-vp68-2wrm-69qm

When matrix-rust-sdk recieves forwarded room keys, the reciever doesn't check if it requested the key from the forwarder

MEDIUM 44

matrix-rust-sdk is an implementation of a Matrix client-server library in Rust, and matrix-sdk-crypto is the Matrix encryption library.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.0063 Published 2022-09-29 Fixed in 0.6, 0.6.0 CWE-287

TI-2019-13571 CVE-2019-18835 · GHSA-cppw-2mf8-qpm5

Matrix Synapse before 1.5.0 mishandles signature checking on some federation APIs.

MEDIUM 44

Matrix Synapse before 1.5.0 mishandles signature checking on some federation APIs.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00864 Published 2019-11-07 Fixed in 1.5.0 CWE-345

TI-2024-36056 CVE-2024-53863 · GHSA-vp6v-whfm-rv3g

Synapse can be forced to thumbnail unexpected file formats, invoking external, potentially untrustworthy decoders

MEDIUM 43

Synapse is an open-source Matrix homeserver.

CVSS 4.0HIGH 8.2 Network No auth No interaction EPSS 0.00606 Published 2024-12-03 Fixed in 1.120.1 CWE-434

TI-2024-35318 CVE-2024-52805 · GHSA-rfq8-j7rh-8hf2

Synapse allows unsupported content types to lead to memory exhaustion

MEDIUM 43

Synapse is an open-source Matrix homeserver.

CVSS 4.0HIGH 8.2 Network No auth No interaction EPSS 0.00739 Published 2024-12-03 Fixed in 1.120.1 CWE-770

TI-2023-12682 CVE-2023-28103 · GHSA-6g43-88cp-w5gv

Prototype pollution in matrix-react-sdk

MEDIUM 43

matrix-react-sdk is a Matrix chat protocol SDK for React Javascript.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00712 Published 2023-03-28 Fixed in 3.69.0 CWE-1321

TI-2022-16483 CVE-2022-36060 · GHSA-2x9c-qwgf-94xr

Prototype pollution in matrix-react-sdk

MEDIUM 43

matrix-react-sdk is a Matrix chat protocol SDK for React Javascript.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00906 Published 2023-03-28 Fixed in 3.53.0 CWE-1321

TI-2022-16482 CVE-2022-36059 · GHSA-rfv9-x7hh-xc32

Prototype pollution in matrix-js-sdk

MEDIUM 43

matrix-js-sdk is a Matrix messaging protocol Client-Server SDK for JavaScript.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00932 Published 2023-03-28 Partial fix · 19.4.0 CWE-1321

TI-2022-18583 CVE-2022-39203 · GHSA-xvqg-mv25-rwvw

Parsing issue in matrix-org/node-irc leading to room takeovers

MEDIUM 42

matrix-appservice-irc is an open source Node.js IRC bridge for Matrix.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00882 Published 2022-09-13 Fixed in 0.35.0 CWE-269

TI-2022-11710 CVE-2022-29166 · GHSA-37hr-348p-rmf4

Improper handling of multiline messages in matrix-appservice-irc

MEDIUM 42

matrix-appservice-irc is a Node.js IRC bridge for Matrix.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01005 Published 2022-05-05 Fixed in 0.34.0, 0.33.2 CWE-74

Open these records in search →

Critical	8
High	42
Medium	57
Low	9
No CVSS	0