- How many CVEs does matrix-org have?
- matrix-org has 120 published CVE records since 2005, including 21 in the last two years.
- How many matrix-org CVEs are in CISA KEV?
- None of matrix-org's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
- Which matrix-org products have the most CVEs?
- The matrix-org products with the most published CVEs are synapse, matrix-synapse, matrix-js-sdk, matrix-rust-sdk, matrix-appservice-irc.
- What are the most common weakness types in matrix-org CVEs?
- matrix-org's CVEs most often map to these CWE weakness types: CWE-20 (Improper Input Validation), CWE-287 (Improper Authentication), CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor), CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')).
- Are there public exploits for matrix-org vulnerabilities?
- Yes — 11 of matrix-org's CVEs have a known public exploit.
- How many critical matrix-org vulnerabilities are there?
- matrix-org has 8 critical and 46 high-severity CVEs.
- What is the average severity of matrix-org CVEs?
- The average CVSS base score across matrix-org's scored CVEs is 6.6.