Matrix-react-sdk Project - vulnerabilities (CVEs)

6 CVEs in 1 products, 0 in the last 30 days, newest from 2024-10-15.

Products

CVE-2024-47824 - CVSS 8.7 (high), 2024-10-15: matrix-react-sdk is react-based software development kit for inserting a Matrix chat/VOIP client into a web page. Starting in version 3.18.0 and before…
CVE-2023-37259 - CVSS 6.1 (medium), 2023-07-18: matrix-react-sdk is a react-based SDK for inserting a Matrix chat/voip client into a web page. The Export Chat feature includes certain attacker-controlled…
CVE-2023-30609 - CVSS 5.4 (medium), 2023-04-25: matrix-react-sdk is a react-based SDK for inserting a Matrix chat/VoIP client into a web page. Prior to version 3.71.0, plain text messages containing HTML…
CVE-2023-28103 - CVSS 8.2 (high), 2023-03-28: matrix-react-sdk is a Matrix chat protocol SDK for React Javascript. In certain configurations, data sent by remote servers containing special strings in key…
CVE-2021-32622 - CVSS 7.8 (high), 2021-05-17: Matrix-React-SDK is a react-based SDK for inserting a Matrix chat/voip client into a web page. Before version 3.21.0, when uploading a file, the local file…
CVE-2021-21320 - CVSS 4.3 (medium), 2021-03-02: matrix-react-sdk is an npm package which is a Matrix SDK for React Javascript. In matrix-react-sdk before version 3.15.0, the user content sandbox can be…