matrix-org matrix-react-sdk vulnerabilities

CVEs per yearBy the year they were published

1. 20212
2. 20234
3. 20242

Newest CVEs

• CVE-2024-47824

  Malicious homeservers can steal message keys when the matrix-react-sdk user invites another user to a room

  matrix-org · matrix-react-sdk

  High8.7
• CVE-2024-42347

  URL preview setting for a room is controllable by the homeserver in matrix-react-sdk

  matrix-org · matrix-react-sdk

  High7.7
• CVE-2023-37259

  Cross site scripting in Export Chat feature

  matrix-org · matrix-react-sdk

  Medium6.1
• CVE-2023-30609

  matrix-react-sdk vulnerable to HTML injection in search results via plaintext message highlighting

  matrix-org · matrix-react-sdk

  Medium5.4
• CVE-2022-36060

  Prototype pollution in matrix-react-sdk

  matrix-org · matrix-react-sdk

  High8.2
• CVE-2023-28103

  Prototype pollution in matrix-react-sdk

  matrix-org · matrix-react-sdk

  High8.2
• CVE-2021-32622

  File upload local preview can run embedded scripts after user interaction

  matrix-org · matrix-react-sdk

  Medium4.2
• CVE-2021-21320

  User content sandbox can be confused into opening arbitrary documents

  matrix-org · matrix-react-sdk

  Low2.6