Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

matrix-js-sdk — Vulnerabilities & Security Advisories 11

All 11 CVE vulnerabilities found in matrix-js-sdk, with AI-generated Chinese analysis, references, and POCs.

Vendor: matrix-org

CVE IDTitleCVSSSeverityPublished
CVE-2025-59160 matrix-js-sdk has insufficient validation when considering a room to be upgraded by another CWE-345 7.5AIHighAI2025-09-16
CVE-2024-50336 matrix-js-sdk has insufficient MXC URI validation which allows client-side path traversal CWE-22 7.1AIHighAI2024-11-12
CVE-2024-47080 matrix-js-sdk keys sent via `sendSharedHistoryKeys` vulnerable to interception by malicious homeserver CWE-200 7.5 -2024-10-15
CVE-2024-42369 A room with itself as a its predecessor will freeze matrix-js-sdk CWE-674 4.1 Medium2024-08-20
CVE-2023-29529 matrix-js-sdk vulnerable to invisible eavesdropping in group calls CWE-862 5.0 Medium2023-04-14
CVE-2023-28427 Prototype pollution in matrix-js-sdk CWE-1321 8.2 High2023-03-28
CVE-2022-36059 Prototype pollution in matrix-js-sdk CWE-1321 8.2 High2023-03-28
CVE-2022-39250 Matrix JavaScript SDK vulnerable to key/device identifier confusion in SAS verification CWE-322 8.6 High2022-09-29
CVE-2022-39236 Matrix Javascript SDK improper beacon events can cause availability issues CWE-20 4.3 Medium2022-09-28
CVE-2022-39249 Matrix Javascript SDK vulnerable to impersonation via forwarded Megolm sessions CWE-322 7.5 High2022-09-28
CVE-2022-39251 Matrix Javascript SDK vulnerable to Olm/Megolm protocol confusion CWE-322 8.6 High2022-09-28

All 11 known CVE vulnerabilities affecting matrix-js-sdk with full Chinese analysis, references, and POCs where available.