Priority LOW 30
matrix-sdk-crypto is a no-network-IO implementation of a state machine that handles end-to-end encryption for Matrix clients.
CVSS 4.0MEDIUM 6.9· Network · High privileges · No interaction · EPSS 0.00308 · Published 2026-09-11 · Fixed in 0.16.1 CWE-290
Priority LOW 22
matrix-sdk-ui provides GUI-centric utilities on top of matrix-rust-sdk.
CVSS 3.1MEDIUM 4.9· Network · High privileges · No interaction · EPSS 0.00233 · Published 2026-09-11 · Fixed in 0.16.1 CWE-345
Priority MEDIUM 57
Dendrite through 0.13.8 contains an improper access control vulnerability in the syncapi /context endpoint (syncapi/routing/context.go) that allows authenticated local users to access post-leave room state events by expl…
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00267 · Published 2026-07-17 · No fix listed CWE-863
Priority HIGH 70
Dendrite through 0.13.8 contains a server-side request forgery vulnerability that allows unauthenticated attackers to cause the server to open outbound TLS connections to arbitrary hosts and ports by supplying an unvalid…
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00335 · Published 2026-07-17 · No fix listed CWE-918
Priority MEDIUM 64
Dendrite through 0.13.8 contains an improper authorization vulnerability in the Matrix Client-Server API that allows any authenticated local user to delete third-party identifier bindings belonging to other users by subm…
CVSS 4.0HIGH 7.1· Network · Low privileges · No interaction · EPSS 0.00296 · Published 2026-07-17 · No fix listed CWE-639
Priority LOW 14
matrix-sdk-base is the base component to build a Matrix client library.
CVSS 4.0LOW 1.3· Network · No auth · User interaction · EPSS 0.00413 · Published 2025-12-09 · Fixed in 0.16.0 CWE-755
Priority LOW 31
The Matrix specification before 1.16 (i.e., with a room version before 12) lacks create event uniqueness.
CVSS 3.1HIGH 7.1· Network · Low privileges · No interaction · EPSS 0.00335 · Published 2025-10-02 · Fixed in 1.16 CWE-837
Priority LOW 32
The Matrix specification before 1.16 (i.e., with a room version before 12 and State Resolution before 2.1) has deficient state resolution.
CVSS 3.1HIGH 7.1· Network · Low privileges · No interaction · EPSS 0.00473 · Published 2025-10-02 · Fixed in 1.16 CWE-642
Priority LOW 19
Matrix JavaScript SDK is a Matrix Client-Server SDK for JavaScript and TypeScript.
CVSS 4.0LOW 2.7· Network · No auth · No interaction · EPSS 0.00243 · Published 2025-09-16 · Fixed in 38.2.0 CWE-345
Priority LOW 20
matrix-sdk-base is the base component to build a Matrix client library.
CVSS 4.0LOW 2.7· Network · No auth · No interaction · EPSS 0.00401 · Published 2025-09-11 · Fixed in 0.14.1 CWE-682
Priority LOW 25
The Matrix Rust SDK is a collection of libraries that make it easier to build Matrix clients in Rust.
CVSS 4.0MEDIUM 5.2· Network · Low privileges · No interaction · EPSS 0.0031 · Published 2025-07-10 · Fixed in 0.13, 0.13.0 CWE-89
Priority LOW 23
matrix-rust-sdk is an implementation of a Matrix client-server library in Rust.
CVSS 3.1MEDIUM 4.9· Network · High privileges · No interaction · EPSS 0.00385 · Published 2025-06-10 · Fixed in 0.11.1 CWE-290
Priority LOW 35
Synapse is an open source Matrix homeserver implementation.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01226 · Published 2025-03-27 · Fixed in 1.127.1 CWE-20
Priority LOW 27
Pinecone is an experimental overlay routing protocol suite which is the foundation of the current P2P Matrix demos.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00235 · Published 2025-03-04 · Fixed in 218b2801995b174085cb1c8fafe2d3aa661f85bd CWE-79
Priority LOW 20
matrix-appservice-irc is a Node.js IRC bridge for Matrix.
CVSS 3.1MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.00396 · Published 2025-02-25 · Fixed in 3.0.4 CWE-77
Priority LOW 29
matrix-hookshot is a Matrix bot for connecting to external services like GitHub, GitLab, JIRA, and more.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00471 · Published 2025-01-27 · Fixed in 6.0.2, 5.4.2 CWE-754
Priority MEDIUM 46
Mjolnir is a moderation tool for Matrix.
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.0062 · Published 2025-01-21 · No fix listed CWE-671
Priority LOW 20
Gomatrixserverlib is a Go library for matrix federation.
CVSS 3.1MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.00354 · Published 2025-01-16 · Fixed in 0.0.0-20250116181547-c4f1e01eab0d CWE-918
Priority LOW 21
matrix-rust-sdk is an implementation of a Matrix client-server library in Rust.
CVSS 3.1MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.0049 · Published 2025-01-07 · Fixed in 0.8.0 CWE-223
Priority LOW 30
Synapse is an open-source Matrix homeserver.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.0043 · Published 2024-12-03 · Fixed in 1.106 CWE-306
Priority MEDIUM 40
Synapse is an open-source Matrix homeserver.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00596 · Published 2024-12-03 · Fixed in 1.106 CWE-770
Priority MEDIUM 43
Synapse is an open-source Matrix homeserver.
CVSS 4.0HIGH 8.2· Network · No auth · No interaction · EPSS 0.00739 · Published 2024-12-03 · Fixed in 1.120.1 CWE-770
Priority MEDIUM 44
Synapse is an open-source Matrix homeserver.
CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.0057 · Published 2024-12-03 · Fixed in 1.120.1 CWE-20
Priority MEDIUM 43
Synapse is an open-source Matrix homeserver.
CVSS 4.0HIGH 8.2· Network · No auth · No interaction · EPSS 0.00606 · Published 2024-12-03 · Fixed in 1.120.1 CWE-434
Priority LOW 25
matrix-appservice-irc is a Node.js IRC bridge for the Matrix messaging protocol.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · No interaction · EPSS 0.00384 · Published 2024-11-14 · Fixed in 3.0.3 CWE-147
Load more
THREATIST.IORead the docs