Skip to content
OpenAdvisories

Vendor

Matrix

91 known vulnerabilities.

Products

synapse 24 matrix-js-sdk 11 matrix-appservice-irc 9 matrix-rust-sdk 8 matrix-react-sdk 8 sydent 5 Tafnit v8 4 dendrite 4 vodozemac 2 matrix-hookshot 2 Matrix specification 2 matrix-appservice-bridge 2 gomatrixserverlib 2 matrix-android-sdk2 2 matrix-ios-sdk 2 matrix-sdk-crypto 1 matrix-sdk-ui 1 mjolnir 1 pinecone 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.1
    CVE-2025-24024

    Mjolnir v1.9.0 accepts commands from any room

    Mjolnir is a moderation tool for Matrix. Mjolnir v1.9.0 responds to management commands from any room the bot is member of. This can allow users who aren't operators of the bot to use the bot's functions, including server administration components if enabled.…

    Matrix mjolnir
  • Critical 9.3
    CVE-2023-38686

    Sydent does not verify email server certificates

    Sydent is an identity server for the Matrix communications protocol. Prior to version 2.5.6, if configured to send emails using TLS, Sydent does not verify SMTP servers' certificates. This makes Sydent's emails vulnerable to interception via a man-in-the-midd…

    Matrix sydent matrix-sydent matrix-sydent Ubuntu PyPI