matrix
Security Risk Profile
46
/100
mediumSecurity Risk Score
Comprehensive risk assessment based on 98 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from February 6, 2004 to present
98
Total CVEs
53
Critical+High
1
Exploited
16
Unpatched
Threat Assessment
Avg CVSS
7
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
16
Critical/High
Risk Level
46/100
medium
⚠️ 1 Active Exploits
Severity Distribution
Critical
14High
39Medium
40Low
5Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
4Age Distribution
Common Weaknesses (CWE)
1
Input Validation
15
2
Infoleak
6
3
XSS
4
4
SSRF
3
5
SQL Injection
2
Most Affected Products
1. pip/matrix-synapse40
2. matrix synapse40
3. Fedoraproject Fedora33
4. debian/matrix-synapse8
5. matrix Javascript Sdk Node.js8
Recent Vulnerabilities
See more →CVE-2025-66622
CVSS 7.5high
matrix-sdk-base is vulnerable to DoS via custom m.room.join_rules event values
12/8/2025
CVE-2025-49090
CVSS 7.1high
10/2/2025🔧 No Patch
CVE-2025-54315
CVSS 7.1high
10/2/2025🔧 No Patch
CVE-2025-59160
CVSS 2.7low
matrix-js-sdk has insufficient validation when considering a room to be upgraded by another
9/16/2025
CVE-2024-13955
CVSS 9.4critical
SQL Injection 2nd Order
5/22/2025🔧 No Patch
CVE-2024-13953
CVSS 6.9medium
Sensitive Information disclosed in log files
5/22/2025🔧 No Patch
CVE-2024-13951
CVSS 7.6high
One way hash with predictable salt
5/22/2025🔧 No Patch
CVE-2024-13948
CVSS 7.3high
Insecure Permissions
5/22/2025🔧 No Patch
CVE-2024-13947
CVSS 7.1high
External System or Configuration Control
5/22/2025🔧 No Patch
CVE-2025-30355
CVSS 7.5EPSS 0%high
Synapse vulnerable to federation denial of service via malformed events
3/27/2025
Monitor matrix in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.