What’s Vulnerable › Products

matrix-org dendrite vulnerabilities

5 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your matrix-org dendrite version is affected

Latest matrix-org dendrite vulnerabilities

• CVE-2026-63097 — Dendrite 0.13.8 syncapi /context Endpoint Post-Leave State Exposure (CVSS 4.3)
• CVE-2026-63096 — Dendrite 0.13.8 SSRF via Unauthenticated Legacy Media Download Endpoint (CVSS 5.8)
• CVE-2026-63095 — Dendrite 0.13.8 Improper Authorization via POST account/3pid/delete Endpoint (CVSS 6.5)
• CVE-2022-39200 — Signature checks not applied to some retrieved missing events (CVSS 5.3)
• CVE-2022-36009 — Incorrect parsing of access level in gomatrixserverlib and dendrite (CVSS 8.8)