Data

Tools

Indexes

Applications

Experiments

Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

npm

matrix-js-sdk

npm · Matrix Client-Server SDK for Javascript · Repository · Package

Security Advisories for matrix-js-sdk in npm

Moderate
17 days ago

matrix-js-sdk has insufficient validation when considering a room to be upgraded by another GSA_kwCzR0hTQS1tcDdjLW0zcmgtcjU2ds4ABMPw

npm matrix-js-sdk
Moderate
11 months ago

matrix-js-sdk has insufficient MXC URI validation which allows client-side path traversal GSA_kwCzR0hTQS14dmc4LW00eDMtdzZ4cs4ABBP2

npm matrix-js-sdk
High
12 months ago

Matrix JavaScript SDK's key history sharing could share keys to malicious devices GSA_kwCzR0hTQS00amY4LWc4d3AtY3g3Y84ABARf

npm matrix-js-sdk
Moderate
about 1 year ago

matrix-js-sdk will freeze when a user sets a room with itself as a its predecessor GSA_kwCzR0hTQS12aHI1LWczcG0tNDlmbc4AA-z_

npm matrix-js-sdk
Moderate
over 2 years ago

matrix-js-sdk vulnerable to invisible eavesdropping in group calls GSA_kwCzR0hTQS02ZzY3LXEzOWctcjc5cc4AAyyO

npm matrix-js-sdk
High
over 2 years ago

Prototype pollution in matrix-js-sdk (part 2) GSA_kwCzR0hTQS1td3E4LWZqcGYtYzJncs4AAydt

npm matrix-js-sdk
High
over 2 years ago

matrix-js-sdk Prototype Pollution vulnerability GSA_kwCzR0hTQS1yZnY5LXg3aGgteGMzMs4AAyX4

npm matrix-js-sdk
High
about 3 years ago

matrix-js-sdk subject to user impersonation due to key/device identifier confusion in SAS verification GSA_kwCzR0hTQS01dzhyLThwZ2otNWptZs4AAvIn

npm matrix-js-sdk
High
about 3 years ago

matrix-js-sdk subject to user spoofing via Olm/Megolm protocol confusion GSA_kwCzR0hTQS1yNDhyLWo4ZngtbXEyY84AAvIf

npm matrix-js-sdk
High
about 3 years ago

matrix-js-sdk subject to impersonated messages due to permissive key forwarding GSA_kwCzR0hTQS02MjYzLXg5N2MtYzRnZ84AAvIe

npm matrix-js-sdk
Moderate
about 3 years ago

Improper beacon events in matrix-js-sdk can result in availability issues GSA_kwCzR0hTQS1odnY4LTV2ODYtcjQ1eM4AAvHM

npm matrix-js-sdk
Moderate
about 4 years ago

matrix-js-sdk can be tricked into disclosing E2EE room keys to a participating homeserver GSA_kwCzR0hTQS0yM2NtLXg2ajctNmhxM80Vvw

npm matrix-js-sdk

Filter by Severity

High 6 Moderate 6