Mmastodon TechnologyCybersecurity first seen 10 h ago, last 10 h ago, peak #12

Element chat app faces 18 unpatched vulnerabilities

Original: Element (Matrix) has 18 CVEs with 100% unpatched and a C trust score. Max CVSS 8.4, 3 high severity, CWE-200 info leaks

Security researcher Hugo Valters reports that Element, the flagship client for the Matrix messaging protocol, has 18 published CVEs with none currently patched, earning it a C vendor trust score. The maximum severity is a CVSS 8.4, with three high-severity flaws, mostly CWE-200 information-exposure issues. Commenters note that even encrypted messaging platforms require consistent patch discipline to stay secure.

Why now: Security professionals are discussing the finding because an encrypted chat app with fully unpatched CVEs raises concerns about Matrix's security posture.

ElementMatrixHugo Valters

Open on mastodon →

Evidence

• Element (Matrix) has 18 CVEs with 100% unpatched and a C trust score. Max CVSS 8.4, 3 high severity, CWE-200 info leaks top the list. Encrypted chat still needs patch discipline. https://www. valtersit.com/vendors/element/ # cybersecurity # infosec # Element · hugovalters · 1

API: https://socialmediatrends-api.osmike.com/v1/trends/1613626