matrix-org matrix-js-sdk vulnerabilities
11 published CVEs name matrix-org matrix-js-sdk among the affected products.
- 11Published CVEs11 of them scored
- 0Last 12 monthspublished in the last year
- 0Critical6 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2025-59160
matrix-js-sdk has insufficient validation when considering a room to be upgraded by another
matrix-org · matrix-js-sdk
Low2.7 - CVE-2024-50336
matrix-js-sdk has insufficient MXC URI validation which allows client-side path traversal
matrix-org · matrix-js-sdk
Medium5.3 - CVE-2024-47080
matrix-js-sdk keys sent via `sendSharedHistoryKeys` vulnerable to interception by malicious homeserver
matrix-org · matrix-js-sdk
High8.7 - CVE-2024-42369
A room with itself as a its predecessor will freeze matrix-js-sdk
matrix-org · matrix-js-sdk
Medium4.1 - CVE-2023-29529
matrix-js-sdk vulnerable to invisible eavesdropping in group calls
matrix-org · matrix-js-sdk
Medium5.0 - CVE-2023-28427
Prototype pollution in matrix-js-sdk
matrix-org · matrix-js-sdk
High8.2 - CVE-2022-36059
Prototype pollution in matrix-js-sdk
matrix-org · matrix-js-sdk
High8.2 - CVE-2022-39250
Matrix JavaScript SDK vulnerable to key/device identifier confusion in SAS verification
matrix-org · matrix-js-sdk
High8.6 - CVE-2022-39251
Matrix Javascript SDK vulnerable to Olm/Megolm protocol confusion
matrix-org · matrix-js-sdk
High8.6 - CVE-2022-39249
Matrix Javascript SDK vulnerable to impersonation via forwarded Megolm sessions
matrix-org · matrix-js-sdk
High7.5