{"items":[{"id":"CVE-2025-54315","published":"2025-10-02T00:00:00.000Z","updated":"2025-10-02T19:33:55.972Z","title":"The Matrix specification before 1.16 (i.e., with a room version before 12) lacks create event uniqueness.","severity":"HIGH","score":7.1,"vendor":"Matrix","product":"Matrix specification","kev":false,"epss":0.00335,"kevAdded":null},{"id":"CVE-2025-49090","published":"2025-10-02T00:00:00.000Z","updated":"2025-10-02T19:35:08.439Z","title":"The Matrix specification before 1.16 (i.e., with a room version before 12 and State Resolution before 2.1) has deficient state resolution.","severity":"HIGH","score":7.1,"vendor":"Matrix","product":"Matrix specification","kev":false,"epss":0.00473,"kevAdded":null},{"id":"CVE-2024-38432","published":"2024-07-30T08:50:23.808Z","updated":"2024-08-02T04:12:24.563Z","title":"Matrix – Tafnit v8 CWE-646: Reliance on File Name or Extension of Externally-Supplied File","severity":"MEDIUM","score":5.5,"vendor":"Matrix","product":"Tafnit v8","kev":false,"epss":0.00173,"kevAdded":null},{"id":"CVE-2024-38431","published":"2024-07-30T08:48:55.837Z","updated":"2024-08-02T04:12:24.561Z","title":"Matrix Tafnit v8 - CWE-204: Observable Response Discrepancy","severity":"MEDIUM","score":5.3,"vendor":"Matrix","product":"Tafnit v8","kev":false,"epss":0.0035,"kevAdded":null},{"id":"CVE-2024-38430","published":"2024-07-30T08:47:23.881Z","updated":"2024-08-02T04:12:25.202Z","title":"Matrix - CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')","severity":"MEDIUM","score":5.4,"vendor":"Matrix","product":"Tafnit v8","kev":false,"epss":0.00254,"kevAdded":null},{"id":"CVE-2024-38429","published":"2024-07-30T08:45:17.371Z","updated":"2024-08-02T04:12:24.812Z","title":"Matrix - CWE-552: Files or Directories Accessible to External Parties","severity":"HIGH","score":7.5,"vendor":"Matrix","product":"Tafnit v8","kev":false,"epss":0.00402,"kevAdded":null}]}