Product by Matrix-org

    Dendrite

    5 known vulnerabilities in Dendrite (Matrix-org), 0 of them actively exploited (CISA KEV).

    Key figures

    5

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    0

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Dendrite (Matrix-org)
    MediumCVE-2026-63096

    Dendrite 0.13.8 SSRF via Unauthenticated Legacy Media Download Endpoint

    		5.8
    HighCVE-2026-63095

    Dendrite 0.13.8 Improper Authorization via POST account/3pid/delete Endpoint

    		6.5
    HighCVE-2022-36009

    Incorrect parsing of access level in gomatrixserverlib and dendrite

    also in 3 other products

    		5.0
    MediumCVE-2026-63097

    Dendrite 0.13.8 syncapi /context Endpoint Post-Leave State Exposure

    		4.3
    HighCVE-2022-39200

    Signature checks not applied to some retrieved missing events

    also in 2 other products

    		7.3

    All products by Matrix-org