CVE-2025-23197

matrix-hookshot is a Matrix bot for connecting to external services like GitHub, GitLab, JIRA, and more. When Hookshot 6 version 6.0.1 or below, or Hookshot 5 version 5.4.1 or below, is configured with GitHub support, it is vulnerable to a Denial of Service (DoS) whereby it can crash on restart due to a missing check. The impact is greater to you untrusted users can add their own GitHub organizations to Hookshot in order to connect their room to a repository. This vulnerability is fixed in 6.0.2 and 5.4.2.

• CWE-754

• https://github.com/matrix-org/matrix-hookshot/commit/e51d8210233ac759e7f7dfebc2c4f1bf6ce94802
• https://github.com/matrix-org/matrix-hookshot/security/advisories/GHSA-cr4q-jf47-3645

Published

Jan 27, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-23191Cached values belonging to the SAP OData endpoint in SAP Fio…3.1
• CVE-2025-23192SAP BusinessObjects Business Intelligence (BI Workspace) all…7.6
• CVE-2025-23193SAP NetWeaver Server ABAP allows an unauthenticated attacker…7.5
• CVE-2025-23194SAP NetWeaver Enterprise Portal OBN does not perform proper …5.3
• CVE-2025-23195An XML External Entity (XXE) vulnerability exists in the Amb…7.5
• CVE-2025-23196A code injection vulnerability exists in the Ambari Alert De…8.8
• CVE-2025-23198librenms is a community-based GPL-licensed network monitorin…5.4
• CVE-2025-23199librenms is a community-based GPL-licensed network monitorin…5.4
• CVE-2025-2320A vulnerability has been found in 274056675 springboot-opena…9.8
• CVE-2025-23200librenms is a community-based GPL-licensed network monitorin…5.4
• CVE-2025-23201librenms is a community-based GPL-licensed network monitorin…6.1
• CVE-2025-23202Bible Module is a tool designed for ROBLOX developers to int…10