{"schema_version":1,"title":"Matrix vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 7 vulnerabilities in Matrix: 1 in the last 7 days and 2 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, vodozemac degraded secret zeroization in cryptographic libraries, was published on 6 November 2026. 1 vulnerability in the last four weeks, up from none in the four before.","url":"https://junglewise.ai/threats/vendors/matrix","json_url":"https://junglewise.ai/threats/vendors/matrix.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/vendors/matrix","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"vendor","thin":false,"counts":{"high":1,"all_time":7,"critical":0,"exploited":0,"last_7_days":1,"last_30_days":1,"last_90_days":2,"last_365_days":3},"latest":[{"slug":"rustsec-2026-0445-degraded-secret-zeroization-capabilities-1022d5f6","title":"vodozemac degraded secret zeroization in cryptographic libraries","severity":"info","exploited":false,"published_at":"2026-11-06T12:00:00+00:00","url":"https://junglewise.ai/threats/rustsec-2026-0445-degraded-secret-zeroization-capabilities-1022d5f6"},{"cve":"CVE-2026-45056","cvss":4,"epss":0.0031,"slug":"cve-2026-45056-matrix-rust-sdk-sender-spoofing-in-olm-encrypted-to-device","title":"Matrix Rust SDK sender spoofing in Olm-encrypted to-device messages","severity":"medium","exploited":false,"published_at":"2026-09-11T22:16:37.263+00:00","url":"https://junglewise.ai/threats/cve-2026-45056-matrix-rust-sdk-sender-spoofing-in-olm-encrypted-to-device"},{"cve":"CVE-2025-66622","cvss":7.5,"epss":0.0041,"slug":"cve-2025-66622-matrix-sdk-base-denial-of-service-via-custom-m-room-join-rules","title":"RUSTSEC-2025-0135 - matrix-sdk-base: Denial of service due to custom `m.room.join_rules` events","severity":"high","exploited":false,"published_at":"2025-12-09T16:18:21.747+00:00","url":"https://junglewise.ai/threats/cve-2025-66622-matrix-sdk-base-denial-of-service-via-custom-m-room-join-rules"},{"cve":"CVE-2025-27146","cvss":3.1,"epss":0.004,"slug":"cve-2025-27146-matrix-irc-bridge-command-injection-in-puppeted-user","title":"Matrix IRC Bridge command injection in puppeted user","severity":"low","exploited":false,"published_at":"2025-02-25T18:29:34+00:00","url":"https://junglewise.ai/threats/cve-2025-27146-matrix-irc-bridge-command-injection-in-puppeted-user"},{"cve":"CVE-2023-38700","cvss":3.1,"epss":0.006,"slug":"cve-2023-38700-matrix-appservice-irc-information-disclosure-in-event-handling","title":"Matrix AppService IRC information disclosure in event handling","severity":"low","exploited":false,"published_at":"2023-08-04T17:26:07+00:00","url":"https://junglewise.ai/threats/cve-2023-38700-matrix-appservice-irc-information-disclosure-in-event-handling"},{"cve":"CVE-2023-28103","cvss":3.1,"epss":0.0071,"slug":"cve-2023-28103-matrix-matrix-react-sdk-prototype-pollution","title":"Matrix matrix-react-sdk prototype pollution","severity":"low","exploited":false,"published_at":"2023-03-29T19:34:25+00:00","url":"https://junglewise.ai/threats/cve-2023-28103-matrix-matrix-react-sdk-prototype-pollution"},{"cve":"CVE-2022-39251","cvss":3.1,"epss":0.0098,"slug":"cve-2022-39251-matrix-matrix-js-sdk-user-spoofing-via-protocol-confusion","title":"Matrix matrix-js-sdk user spoofing via protocol confusion","severity":"low","exploited":false,"published_at":"2022-09-30T00:41:24+00:00","url":"https://junglewise.ai/threats/cve-2022-39251-matrix-matrix-js-sdk-user-spoofing-via-protocol-confusion"}],"vendor":{"hub":true,"name":"Matrix","slug":"matrix","description":"Open standard for secure, decentralized real-time communication.","url":"https://junglewise.ai/threats/vendors/matrix"},"weekly":[{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-28","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-05","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-12","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-19","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-26","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-02","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-11-09","critical":0,"exploited":0,"vulnerabilities":0}],"most_severe":[{"cve":"CVE-2025-66622","cvss":7.5,"epss":0.0041,"slug":"cve-2025-66622-matrix-sdk-base-denial-of-service-via-custom-m-room-join-rules","title":"RUSTSEC-2025-0135 - matrix-sdk-base: Denial of service due to custom `m.room.join_rules` events","severity":"high","exploited":false,"published_at":"2025-12-09T16:18:21.747+00:00","url":"https://junglewise.ai/threats/cve-2025-66622-matrix-sdk-base-denial-of-service-via-custom-m-room-join-rules"},{"cve":"CVE-2026-45056","cvss":4,"epss":0.0031,"slug":"cve-2026-45056-matrix-rust-sdk-sender-spoofing-in-olm-encrypted-to-device","title":"Matrix Rust SDK sender spoofing in Olm-encrypted to-device messages","severity":"medium","exploited":false,"published_at":"2026-09-11T22:16:37.263+00:00","url":"https://junglewise.ai/threats/cve-2026-45056-matrix-rust-sdk-sender-spoofing-in-olm-encrypted-to-device"},{"cve":"CVE-2022-39251","cvss":3.1,"epss":0.0098,"slug":"cve-2022-39251-matrix-matrix-js-sdk-user-spoofing-via-protocol-confusion","title":"Matrix matrix-js-sdk user spoofing via protocol confusion","severity":"low","exploited":false,"published_at":"2022-09-30T00:41:24+00:00","url":"https://junglewise.ai/threats/cve-2022-39251-matrix-matrix-js-sdk-user-spoofing-via-protocol-confusion"},{"cve":"CVE-2023-28103","cvss":3.1,"epss":0.0071,"slug":"cve-2023-28103-matrix-matrix-react-sdk-prototype-pollution","title":"Matrix matrix-react-sdk prototype pollution","severity":"low","exploited":false,"published_at":"2023-03-29T19:34:25+00:00","url":"https://junglewise.ai/threats/cve-2023-28103-matrix-matrix-react-sdk-prototype-pollution"},{"cve":"CVE-2023-38700","cvss":3.1,"epss":0.006,"slug":"cve-2023-38700-matrix-appservice-irc-information-disclosure-in-event-handling","title":"Matrix AppService IRC information disclosure in event handling","severity":"low","exploited":false,"published_at":"2023-08-04T17:26:07+00:00","url":"https://junglewise.ai/threats/cve-2023-38700-matrix-appservice-irc-information-disclosure-in-event-handling"},{"cve":"CVE-2025-27146","cvss":3.1,"epss":0.004,"slug":"cve-2025-27146-matrix-irc-bridge-command-injection-in-puppeted-user","title":"Matrix IRC Bridge command injection in puppeted user","severity":"low","exploited":false,"published_at":"2025-02-25T18:29:34+00:00","url":"https://junglewise.ai/threats/cve-2025-27146-matrix-irc-bridge-command-injection-in-puppeted-user"},{"slug":"rustsec-2026-0445-degraded-secret-zeroization-capabilities-1022d5f6","title":"vodozemac degraded secret zeroization in cryptographic libraries","severity":"info","exploited":false,"published_at":"2026-11-06T12:00:00+00:00","url":"https://junglewise.ai/threats/rustsec-2026-0445-degraded-secret-zeroization-capabilities-1022d5f6"}],"generated_at":"2026-11-09T03:07:00.176479+00:00","technologies":[]}