M
MATRIX
Security Risk Profile
46
/100
mediumSecurity Risk Score
Comprehensive risk assessment based on 98 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from February 6, 2004 to present
98
Total CVEs
52
Critical+High
1
Exploited
15
Unpatched
Threat Assessment
Avg CVSS
7
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
15
Critical/High
Risk Level
46/100
medium
⚠️ 1 Active Exploits
Severity Distribution
Critical
13High
39Medium
40Low
6Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
4Age Distribution
Common Weaknesses (CWE)
1
Input Validation
15
2
Infoleak
6
3
XSS
4
4
SSRF
3
5
SQL Injection
2
Most Affected Products
1. alpine/synapse189
2. alpine/element-web70
3. pip/matrix-synapse40
4. matrix synapse40
5. Fedoraproject Fedora33
Recent Vulnerabilities
See more →CVE-2025-66622
CVSS 1.3low
matrix-sdk-base is vulnerable to DoS via custom m.room.join_rules event values
Dec 8, 2025
CVE-2025-49090
CVSS 7.1high
Oct 2, 2025
CVE-2025-54315
CVSS 7.1high
Oct 2, 2025🔧 No Patch
CVE-2025-59160
CVSS 2.7low
matrix-js-sdk has insufficient validation when considering a room to be upgraded by another
Sep 16, 2025
CVE-2024-13955
CVSS 9.4critical
SQL Injection 2nd Order
May 22, 2025🔧 No Patch
CVE-2024-13953
CVSS 6.9medium
Sensitive Information disclosed in log files
May 22, 2025🔧 No Patch
CVE-2024-13951
CVSS 7.6high
One way hash with predictable salt
May 22, 2025🔧 No Patch
CVE-2024-13948
CVSS 7.3high
Insecure Permissions
May 22, 2025🔧 No Patch
CVE-2024-13947
CVSS 7.1high
External System or Configuration Control
May 22, 2025🔧 No Patch
CVE-2025-30355
CVSS 7.5EPSS 0%high
Synapse vulnerable to federation denial of service via malformed events
Mar 27, 2025
Monitor MATRIX in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.