matrix Vulnerability Advisory Catalog

Total 82 security vulnerabilities recorded for matrix software and firmware.

← Back to All Vendors
Component: synapse

Synapse is a Matrix protocol homeserver written in Python with the Twisted framework. In affected versions it may be possible for a deactivated user t...

📅 2023-06-06
CVSS 5.4 Dossier →
Component: synapse

Synapse is an open-source Matrix homeserver written and maintained by the Matrix.org Foundation. A malicious user on a Synapse homeserver X with permi...

📅 2023-05-26
CVSS 5.0 Dossier →
Component: synapse

Synapse is an open-source Matrix homeserver written and maintained by the Matrix.org Foundation. If Synapse and a malicious homeserver are both joined...

📅 2023-05-26
CVSS 6.5 Dossier →
Component: synapse

Synapse is an open-source Matrix homeserver written and maintained by the Matrix.org Foundation. The Matrix Federation API allows remote homeservers t...

📅 2023-05-26
CVSS 5.0 Dossier →
Component: javascript_sdk

matrix-js-sdk is the Matrix Client-Server SDK for JavaScript and TypeScript. An attacker present in a room where an MSC3401 group call is taking place...

📅 2023-04-14
CVSS 5.0 Dossier →
Component: javascript_sdk

matrix-js-sdk is a Matrix messaging protocol Client-Server SDK for JavaScript. In versions prior to 24.0.0 events sent with special strings in key pla...

📅 2023-03-28
CVSS 8.2 Dossier →
Component: react_sdk

matrix-react-sdk is a Matrix chat protocol SDK for React Javascript. Events sent with special strings in key places can temporarily disrupt or impede ...

📅 2023-03-28
CVSS 8.2 Dossier →
Component: javascript_sdk

matrix-js-sdk is a Matrix messaging protocol Client-Server SDK for JavaScript. In versions prior to 19.4.0 events sent with special strings in key pla...

📅 2023-03-28
CVSS 8.2 Dossier →
Component: synapse

Synapse before 1.52.0 with URL preview functionality enabled will attempt to generate URL previews for media stream URLs without properly limiting con...

📅 2022-11-22
CVSS 6.5 Dossier →
CVE-2022-3971 MEDIUM
Component: matrix_irc_bridge

A vulnerability was found in matrix-appservice-irc up to 0.35.1. It has been declared as critical. This vulnerability affects unknown code of the file...

📅 2022-11-13
CVSS 4.6 Dossier →
Component: matrix-rust-sdk

matrix-rust-sdk is an implementation of a Matrix client-server library in Rust, and matrix-sdk-crypto is the Matrix encryption library. Prior to versi...

📅 2022-09-29
CVSS 8.6 Dossier →
Component: javascript_sdk

Matrix JavaScript SDK is the Matrix Client-Server software development kit (SDK) for JavaScript. Prior to version 19.7.0, an attacker cooperating with...

📅 2022-09-29
CVSS 8.6 Dossier →
Component: software_development_kit

Matrix iOS SDK allows developers to build iOS apps compatible with Matrix. Prior to version 0.23.19, an attacker cooperating with a malicious homeserv...

📅 2022-09-28
CVSS 7.5 Dossier →
Component: software_development_kit

Matrix iOS SDK allows developers to build iOS apps compatible with Matrix. Prior to version 0.23.19, an attacker cooperating with a malicious homeserv...

📅 2022-09-28
CVSS 8.6 Dossier →
Component: javascript_sdk

Matrix Javascript SDK is the Matrix Client-Server SDK for JavaScript. Prior to version 19.7.0, an attacker cooperating with a malicious homeserver can...

📅 2022-09-28
CVSS 8.6 Dossier →
Component: javascript_sdk

Matrix Javascript SDK is the Matrix Client-Server SDK for JavaScript. Prior to version 19.7.0, an attacker cooperating with a malicious homeserver can...

📅 2022-09-28
CVSS 7.5 Dossier →
Component: software_development_kit

matrix-android-sdk2 is the Matrix SDK for Android. Prior to version 1.5.1, an attacker cooperating with a malicious homeserver can construct messages ...

📅 2022-09-28
CVSS 8.6 Dossier →
Component: software_development_kit

matrix-android-sdk2 is the Matrix SDK for Android. Prior to version 1.5.1, an attacker cooperating with a malicious homeserver can construct messages ...

📅 2022-09-28
CVSS 7.5 Dossier →
Component: javascript_sdk

Matrix Javascript SDK is the Matrix Client-Server SDK for JavaScript. Starting with version 17.1.0-rc.1, improperly formed beacon events can disrupt o...

📅 2022-09-28
CVSS 4.3 Dossier →
Component: matrix_irc_bridge

matrix-appservice-irc is an open source Node.js IRC bridge for Matrix. Attackers can specify a specific string of characters, which would confuse the ...

📅 2022-09-13
CVSS 8.8 Dossier →
Component: matrix_irc_bridge

matrix-appservice-irc is an open source Node.js IRC bridge for Matrix. The Internet Relay Chat (IRC) protocol allows you to specify multiple modes in ...

📅 2022-09-13
CVSS 4.3 Dossier →
Component: dendrite

Dendrite is a Matrix homeserver written in Go. In affected versions events retrieved from a remote homeserver using the `/get_missing_events` path did...

📅 2022-09-12
CVSS 7.3 Dossier →
Component: synapse

Synapse is an open-source Matrix homeserver written and maintained by the Matrix.org Foundation. The Matrix specification specifies a list of [event a...

📅 2022-09-02
CVSS 6.4 Dossier →
Component: dendrite

gomatrixserverlib is a Go library for matrix protocol federation. Dendrite is a Matrix homeserver written in Go, an alternative to Synapse. The power ...

📅 2022-08-19
CVSS 5.0 Dossier →
Page 2 of 4 (82 Total Records)