matrix Vulnerability Advisory Catalog

Total 82 security vulnerabilities recorded for matrix software and firmware.

← Back to All Vendors
Component: synapse

Synapse is an open source home server implementation for the Matrix chat network. In versions prior to 1.61.1 URL previews of some web pages can exhau...

📅 2022-06-28
CVSS 6.5 Dossier →
Component: matrix_irc_bridge

matrix-appservice-irc is a Node.js IRC bridge for Matrix. The vulnerability in node-irc allows an attacker to manipulate a Matrix user into executing ...

📅 2022-05-05
CVSS 8.0 Dossier →
CVE-2021-44538 CRITICAL
Component: element

The olm_session_describe function in Matrix libolm before 3.2.7 is vulnerable to a buffer overflow. The Olm session object represents a cryptographic ...

📅 2021-12-14
CVSS 9.8 Dossier →
Component: synapse

Synapse is a package for Matrix homeservers written in Python 3/Twisted. Prior to version 1.47.1, Synapse instances with the media repository enabled ...

📅 2021-11-23
CVSS 7.5 Dossier →
Component: element

A logic error in the room key sharing functionality of Element Android before 1.2.2 and matrix-android-sdk2 (aka Matrix SDK for Android) before 1.2.2 ...

📅 2021-09-13
CVSS 5.9 Dossier →
Component: javascript_sdk

A logic error in the room key sharing functionality of matrix-js-sdk (aka Matrix Javascript SDK) before 12.4.1 allows a malicious Matrix homeserver pr...

📅 2021-09-13
CVSS 5.9 Dossier →
Component: synapse

Matrix is an ecosystem for open federated Instant Messaging and Voice over IP. In versions 1.41.0 and prior, unauthorised users can access the members...

📅 2021-08-31
CVSS 3.1 Dossier →
Component: synapse

Matrix is an ecosystem for open federated Instant Messaging and Voice over IP. In versions 1.41.0 and prior, unauthorised users can access the name, a...

📅 2021-08-31
CVSS 3.1 Dossier →
Component: matrix-appservice-bridge

Matrix-appservice-bridge is the bridging service for the Matrix communication program's application services. In versions 2.6.0 and earlier, if a brid...

📅 2021-06-16
CVSS 6.5 Dossier →
CVE-2021-34813 CRITICAL
Component: olm

Matrix libolm before 3.2.3 allows a malicious Matrix homeserver to crash a client (while it is attempting to retrieve an Olm encrypted room key backup...

📅 2021-06-16
CVSS 9.8 Dossier →
Component: synapse

Synapse is a Matrix reference homeserver written in python (pypi package matrix-synapse). Matrix is an ecosystem for open federated Instant Messaging ...

📅 2021-05-11
CVSS 3.7 Dossier →
Component: sydent

Sydent is a reference matrix identity server. A malicious user could abuse Sydent to send out arbitrary emails from the Sydent email address. This cou...

📅 2021-04-15
CVSS 5.3 Dossier →
Component: sydent

Sydent is a reference Matrix identity server. Sydent can be induced to send HTTP GET requests to internal systems, due to lack of parameter validation...

📅 2021-04-15
CVSS 7.7 Dossier →
Component: sydent

Sydent is a reference Matrix identity server. Sydent does not limit the size of requests it receives from HTTP clients. A malicious user could send an...

📅 2021-04-15
CVSS 7.5 Dossier →
Component: sydent

Sydent is a reference Matrix identity server. In Sydent versions 2.2.0 and prior, sissing input validation of some parameters on the endpoints used to...

📅 2021-04-15
CVSS 4.3 Dossier →
Component: synapse

Synapse is a Matrix reference homeserver written in python (pypi package matrix-synapse). Matrix is an ecosystem for open federated Instant Messaging ...

📅 2021-04-12
CVSS 5.3 Dossier →
Component: synapse

Synapse is a Matrix reference homeserver written in python (pypi package matrix-synapse). Matrix is an ecosystem for open federated Instant Messaging ...

📅 2021-04-12
CVSS 6.3 Dossier →
Component: synapse

Synapse is a Matrix reference homeserver written in python (pypi package matrix-synapse). Matrix is an ecosystem for open federated Instant Messaging ...

📅 2021-04-12
CVSS 5.3 Dossier →
Component: synapse

Synapse is a Matrix reference homeserver written in python (pypi package matrix-synapse). Matrix is an ecosystem for open federated Instant Messaging ...

📅 2021-03-26
CVSS 6.1 Dossier →
Component: synapse

Synapse is a Matrix reference homeserver written in python (pypi package matrix-synapse). Matrix is an ecosystem for open federated Instant Messaging ...

📅 2021-03-26
CVSS 6.9 Dossier →
Component: synapse

Synapse is a Matrix reference homeserver written in python (pypi package matrix-synapse). Matrix is an ecosystem for open federated Instant Messaging ...

📅 2021-02-26
CVSS 4.3 Dossier →
Component: synapse

Synapse is a Matrix reference homeserver written in python (pypi package matrix-synapse). Matrix is an ecosystem for open federated Instant Messaging ...

📅 2021-02-26
CVSS 3.1 Dossier →
Component: synapse

Matrix is an ecosystem for open federated Instant Messaging and VoIP. Synapse is a reference "homeserver" implementation of Matrix. A malicious or poo...

📅 2020-12-09
CVSS 6.5 Dossier →
Component: synapse

Matrix Synapse before 1.20.0 erroneously permits non-standard NaN, Infinity, and -Infinity JSON values in fields of m.room.member events, allowing rem...

📅 2020-11-24
CVSS 7.5 Dossier →
Page 3 of 4 (82 Total Records)