MA
Product
matrix-js-sdk
11
CVEs
0
On KEV
8.7
Max CVSS
0
New 30D
Severity mix
Critical 0High 5Medium 5Low 1
Watch
Add matrix-js-sdk to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-47080 | 8.7 | Oct 15 | matrix-js-sdk keys sent via `sendSharedHistoryKeys` vulnerable to interception by malicious homeserver Affected: >= 9.11.0, < 34.8.0 |
| CVE-2023-28427 | 8.2 | Mar 28 | Prototype pollution in matrix-js-sdk Affected: < 24.0.0 |
| CVE-2022-39250 | 7.5 | Sep 29 | Matrix JavaScript SDK vulnerable to key/device identifier confusion in SAS verification Affected: < 19.7.0 |
| CVE-2022-39249 | 7.5 | Sep 28 | Matrix Javascript SDK vulnerable to impersonation via forwarded Megolm sessions Affected: < 19.7.0 |
| CVE-2022-39251 | 7.5 | Sep 28 | Matrix Javascript SDK vulnerable to Olm/Megolm protocol confusion Affected: < 19.7.0 |
Showing 5