Login Request a demo
MA
Product
matrix-react-sdk
by matrix-org · last CVE Oct 15, 2024
6
CVEs
0
On KEV
8.7
Max CVSS
0
New 30D
Vulnerabilities6In the news0Timeline
Severity mix
Critical 0High 2Medium 4Low 0
Severity
All severities6Critical0High2Medium4Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add matrix-react-sdk to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-47824
8.7
1%
Oct 15
Malicious homeservers can steal message keys when the matrix-react-sdk user invites another user to a room
Affected: >= 3.18.0, < 3.102.0
CVE-2023-28103
8.2
1%
Mar 28
Prototype pollution in matrix-react-sdk
Affected: < 3.69.0
CVE-2024-42347
6.5
0%
Aug 6
URL preview setting for a room is controllable by the homeserver in matrix-react-sdk
Affected: < 3.105.1
CVE-2023-37259
5.4
0%
Jul 18
Cross site scripting in Export Chat feature
Affected: >= 3.32.0, < 3.76.0
CVE-2022-36060
5.3
1%
Mar 28
Prototype pollution in matrix-react-sdk
Affected: < 3.53.0
CVE-2023-30609
4.7
1%
Apr 25
matrix-react-sdk vulnerable to HTML injection in search results via plaintext message highlighting
Affected: < 3.71.0
Showing 6