matrix-react-sdk vulnerabilities

2 known vulnerabilities in matrix-react-sdk from Matrix-org. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.7 High severity

  matrix-react-sdk: Exposure of Sensitive Information to an Unauthorized Actor

  CVE-2024-47824Oct 15, 2024Matrix-org

  matrix-react-sdk is react-based software development kit for inserting a Matrix chat/VOIP client into a web page. Starting in version 3.18.0 and before 3.102.0, matrix-react-sdk allows a malicious homeserver to potentially steal message keys for a room when a

• 8.2 High severity

  matrix-react-sdk: Improperly Controlled Modification of Object Prototype Attributes

  CVE-2023-28103Mar 28, 2023Matrix-org

  matrix-react-sdk is a Matrix chat protocol SDK for React Javascript. In certain configurations, data sent by remote servers containing special strings in key locations could cause modifications of the `Object.prototype`, disrupting matrix-react-sdk functionali