Skip to content
OpenAdvisories

Product · Matrix

matrix-hookshot

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.5
    CVE-2025-23197

    matrix-hookshot has a Potential Denial of Service when Hookshot is configured with GitHub support

    matrix-hookshot is a Matrix bot for connecting to external services like GitHub, GitLab, JIRA, and more. When Hookshot 6 version 6.0.1 or below, or Hookshot 5 version 5.4.1 or below, is configured with GitHub support, it is vulnerable to a Denial of Service (…

    Matrix matrix-hookshot
  • Medium 5.6
    CVE-2023-43656

    Sandbox escape for instances that have enabled transformation functions in matrix-hookshot

    matrix-hookshot is a Matrix bot for connecting to external services like GitHub, GitLab, JIRA, and more. Instances that have enabled transformation functions (those that have `generic.allowJsTransformationFunctions` in their config), may be vulnerable to an a…

    Matrix matrix-hookshot