MA
Product
matrix-js-sdk
11
CVEs
0
On KEV
8.7
Max CVSS
0
New 30D
Severity mix
Critical 0High 5Medium 5Low 1
Watch
Add matrix-js-sdk to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-50336 | 5.3 | Nov 12 | matrix-js-sdk has insufficient MXC URI validation which allows client-side path traversal Affected: < 34.11.1 |
| CVE-2024-42369 | 5.3 | Aug 20 | A room with itself as a its predecessor will freeze matrix-js-sdk Affected: < 34.3.1 |
| CVE-2023-29529 | 5.3 | Apr 14 | matrix-js-sdk vulnerable to invisible eavesdropping in group calls Affected: < 24.1.0 |
| CVE-2022-36059 | 5.3 | Mar 28 | Prototype pollution in matrix-js-sdk Affected: < 19.4.0 |
| CVE-2022-39236 | 5.3 | Sep 28 | Matrix Javascript SDK improper beacon events can cause availability issues Affected: >= 17.1.0-rc.1, < 19.7.0 |
Showing 5