JS
Product
Javascript Sdk
10
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 4Medium 5Low 0
Watch
Add Javascript Sdk to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-44538 | 9.8 | Dec 14 | The olm_session_describe function in Matrix libolm before 3.2.7 is vulnerable to a buffer overflow Affected: 2.4.2 before 15.2.1 |
| CVE-2023-28427 | 8.2 | Mar 28 | matrix-js-sdk is a Matrix messaging protocol Client-Server SDK for JavaScript Affected: before 24.0.0 |
| CVE-2022-39250 | 7.5 | Sep 29 | Matrix JavaScript SDK vulnerable to key/device identifier confusion in SAS verification Affected: before 19.7.0 |
| CVE-2022-39251 | 7.5 | Sep 28 | Matrix Javascript SDK is the Matrix Client-Server SDK for JavaScript Affected: before 19.7.0 |
| CVE-2022-39249 | 7.5 | Sep 28 | Matrix Javascript SDK is the Matrix Client-Server SDK for JavaScript Affected: before 19.7.0 |
| CVE-2021-40823 | 5.9 | Sep 13 | A logic error in the room key sharing functionality of matrix-js-sdk (aka Matrix Javascript SDK) before 12.4.1 allows a malicious Matrix homeserver present in an encrypted room to… Affected: before 12.4.1 |
| CVE-2024-42369 | 5.3 | Aug 20 | A room with itself as a its predecessor will freeze matrix-js-sdk Affected: before 34.3.1 |
| CVE-2023-29529 | 5.3 | Apr 14 | matrix-js-sdk is the Matrix Client-Server SDK for JavaScript and TypeScript Affected: before 24.1.0 |
| CVE-2022-36059 | 5.3 | Mar 28 | matrix-js-sdk is a Matrix messaging protocol Client-Server SDK for JavaScript Affected: before 19.4.0 |
| CVE-2022-39236 | 5.3 | Sep 28 | Matrix Javascript SDK is the Matrix Client-Server SDK for JavaScript Affected: 17.1.0 before 19.7.0; 17.1.0 |
Showing 10
