Skip to main content

Vendor/product archive

matrix / javascript_sdk CVEs

Beta · best-effort

10 CVEs tagged to matrix / javascript_sdk1 Critical, 5 High, 4 Medium, 0 Low, 0 Unrated.

CVE-2024-42369

Published Aug 20, 2024

matrix-js-sdk is a Matrix messaging protocol Client-Server SDK for JavaScript. A malicious homeserver can craft a room or room structure such that the predecessors form a cycle. T…

CVSS 4.1 · Medium
Vendor/product tagsBeta · best-effort

CVE-2023-29529

Published Apr 14, 2023

matrix-js-sdk is the Matrix Client-Server SDK for JavaScript and TypeScript. An attacker present in a room where an MSC3401 group call is taking place can eavesdrop on the video a…

CVSS 5.0 · Medium
Vendor/product tagsBeta · best-effort

CVE-2023-28427

Published Mar 28, 2023

matrix-js-sdk is a Matrix messaging protocol Client-Server SDK for JavaScript. In versions prior to 24.0.0 events sent with special strings in key places can temporarily disrupt o…

CVSS 8.2 · High
Vendor/product tagsBeta · best-effort

CVE-2022-36059

Published Mar 28, 2023

matrix-js-sdk is a Matrix messaging protocol Client-Server SDK for JavaScript. In versions prior to 19.4.0 events sent with special strings in key places can temporarily disrupt o…

CVSS 8.2 · High
Vendor/product tagsBeta · best-effort

CVE-2022-39250

Published Sep 29, 2022

Matrix JavaScript SDK is the Matrix Client-Server software development kit (SDK) for JavaScript. Prior to version 19.7.0, an attacker cooperating with a malicious homeserver could…

CVSS 8.6 · High
Vendor/product tagsBeta · best-effort

CVE-2022-39251

Published Sep 28, 2022

Matrix Javascript SDK is the Matrix Client-Server SDK for JavaScript. Prior to version 19.7.0, an attacker cooperating with a malicious homeserver can construct messages that legi…

CVSS 8.6 · High
Vendor/product tagsBeta · best-effort

CVE-2022-39249

Published Sep 28, 2022

Matrix Javascript SDK is the Matrix Client-Server SDK for JavaScript. Prior to version 19.7.0, an attacker cooperating with a malicious homeserver can construct messages appearing…

CVSS 7.5 · High
Vendor/product tagsBeta · best-effort

CVE-2022-39236

Published Sep 28, 2022

Matrix Javascript SDK is the Matrix Client-Server SDK for JavaScript. Starting with version 17.1.0-rc.1, improperly formed beacon events can disrupt or impede the matrix-js-sdk fr…

CVSS 4.3 · Medium
Vendor/product tagsBeta · best-effort

CVE-2021-40823

Published Sep 13, 2021

A logic error in the room key sharing functionality of matrix-js-sdk (aka Matrix Javascript SDK) before 12.4.1 allows a malicious Matrix homeserver present in an encrypted room to…

CVSS 5.9 · Medium
Vendor/product tagsBeta · best-effort
Showing 1-10 of 10 CVEsPage 1 of 1