Input Validation and Logic

Every one of the 4 is a mark on the map. Named now: 1 to 4, most at risk first.

1. Matrix Synapse before 1.20.0 erroneously permits non-standard NaN, Infinity, and -Infinity JSON values in fields of m.room.member events, allowing remote attackers to execute a de…CVE-2020-26890Matrix · 3.0% likely

   CWE-20

2. util/emailutils.py in Matrix Sydent before 1.0.2 mishandles registration restrictions that are based on e-mail domain, if the allowed_local_3pids option is enabled. This occurs be…CVE-2019-11340Matrix · 1.6% likely

   CWE-20

3. Matrix Synapse before 0.28.1 is prone to a denial of service flaw where malicious events injected with depth = 2^63 - 1 render rooms unusable, related to federation/federation_bas…CVE-2018-10657Matrix · 1.5% likely

   CWE-20

4. The Matrix specification before 1.16 (i.e., with a room version before 12) lacks create event uniqueness.CVE-2025-54315Matrix · CVSS 7.1 · 0.4% likely

   CWE-837

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.