{"id":"CVE-2023-28427","aliases":["ALPINE-CVE-2023-28427","ALSA-2023:1802","ALSA-2023:1809","DEBIAN-CVE-2023-28427","DLA-3400-1","DSA-5392-1","EUVD-2023-1061","GHSA-mwq8-fjpf-c2gr","MGASA-2023-0132","RHSA-2023:1802","RHSA-2023:1803","RHSA-2023:1804","RHSA-2023:1805","RHSA-2023:1806","RHSA-2023:1809","RHSA-2023:1810","RHSA-2023:1811","RLSA-2023:1802","RLSA-2023:1809","SUSE-SU-2023:1736-1","UBUNTU-CVE-2023-28427","openSUSE-SU-2024:12823-1","openSUSE-SU-2024:12852-1"],"status":"published","title":"Prototype pollution in matrix-js-sdk","description":"matrix-js-sdk is a Matrix messaging protocol Client-Server SDK for JavaScript. In versions prior to 24.0.0 events sent with special strings in key places can temporarily disrupt or impede the matrix-js-sdk from functioning properly, potentially impacting the consumer's ability to process data safely. Note that the matrix-js-sdk can appear to be operating normally but be excluding or corrupting runtime data presented to the consumer. This vulnerability is distinct from GHSA-rfv9-x7hh-xc32 which covers a similar issue. The issue has been patched in matrix-js-sdk 24.0.0 and users are advised to upgrade. There are no known workarounds for this vulnerability.","severity":{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.01185,"percentile":0.68203,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-1321"],"published":"2023-03-28T20:32:22Z","modified":"2026-11-03T06:32:48Z","fixes":[{"ecosystem":"npm","package":"matrix-js-sdk","fixed_in":["24.0.0"],"sources":["ghsa","osv"]},{"ecosystem":"Alpine:v3.18","package":"element-web","fixed_in":["1.11.26-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"element-web","fixed_in":["1.11.26-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"element-web","fixed_in":["1.11.26-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"element-web","fixed_in":["1.11.26-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"element-web","fixed_in":["1.11.26-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"element-web","fixed_in":["1.11.26-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"element-web","fixed_in":["1.11.26-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"riot-web","fixed_in":["1.11.26-r0"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"thunderbird","fixed_in":["1:102.9.1-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"thunderbird","fixed_in":["1:102.9.1-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"thunderbird","fixed_in":["1:102.9.1-1"],"sources":["osv"]},{"ecosystem":"Mageia:8","package":"thunderbird","fixed_in":["102.9.1-1.mga8"],"sources":["osv"]},{"ecosystem":"Mageia:8","package":"thunderbird-l10n","fixed_in":["102.9.1-1.mga8"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"element-web","fixed_in":["1.11.26-1.1"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"npm","package":"matrix-js-sdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.0.0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"element-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.11.26-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"element-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.11.26-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"element-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.11.26-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"element-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.11.26-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"element-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.11.26-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"element-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.11.26-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"element-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.11.26-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"riot-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.11.26-r0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"102.10.0-2.el8_7.alma"}]}],"bundled":11},{"source":"osv","ecosystem":"AlmaLinux:9","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"102.10.0-2.el9_1.alma"}]}],"bundled":11},{"source":"osv","ecosystem":"Debian:12","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:102.9.1-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:102.9.1-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:102.9.1-1"}]}]},{"source":"osv","ecosystem":"Debian:10","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:102.10.0-1~deb10u1"}]}],"versions":["1:102.0.1-1","1:102.0.2-1","1:102.0~b4-1","1:102.0~b7-1","1:102.1.0-1","1:102.1.1-1","1:102.1.2-1","1:102.2.0-1","1:102.2.1-1","1:102.2.2-1","1:102.3.0-1","1:102.3.0-1~deb10u1","1:102.3.0-1~deb11u1","1:102.3.1-1","1:102.3.2-1","1:102.3.3-1","1:102.4.0-1","1:102.4.0-1~deb10u1","1:102.4.0-1~deb11u1","1:102.4.1-1","1:102.5.0-1","1:102.5.0-1~deb10u1","1:102.5.0-1~deb11u1","1:102.5.1-1","1:102.6.0-1","1:102.6.0-1~deb10u1","1:102.6.0-1~deb11u1","1:102.7.1+1-1","1:102.7.1-1","1:102.7.2-1","1:102.8.0-1","1:102.8.0-1~deb10u1","1:102.8.0-1~deb11u1","1:102.9.0-1","1:102.9.0-1~deb10u1","1:102.9.0-1~deb11u1","1:102.9.1-1","1:60.7.2-1","1:60.8.0-1","1:60.8.0-1~deb10u1","1:60.8.0-1~deb8u1","1:60.8.0-1~deb9u1","1:60.8.0-2","1:60.9.0-1","1:60.9.0-1~deb10u1","1:60.9.0-1~deb8u1","1:60.9.0-1~deb9u1","1:65.0~b1-1","1:66.0~b1-1","1:67.0~b3-1","1:68.0~b1-1","1:68.1.1-1~exp1","1:68.1.2-1~exp1","1:68.10.0-1","1:68.10.0-1~deb10u1","1:68.10.0-1~deb9u1","1:68.11.0-1","1:68.11.0-1~deb10u1","1:68.11.0-1~deb9u1","1:68.11.0-2","1:68.11.0-3","1:68.12.0-1","1:68.12.0-1~deb10u1","1:68.12.0-1~deb9u1","1:68.12.0-1~deb9u2","1:68.2.1-1","1:68.2.2-1","1:68.2.2-1~deb10u1","1:68.2.2-1~deb8u1","1:68.2.2-1~deb9u1","1:68.3.0-1","1:68.3.0-2","1:68.3.0-2~deb10u1","1:68.3.0-2~deb8u1","1:68.3.0-2~deb9u1","1:68.3.1-1","1:68.4.1-1","1:68.4.1-1~deb10u1","1:68.4.1-1~deb8u1","1:68.4.1-1~deb9u1","1:68.4.2-1","1:68.5.0-1","1:68.5.0-1~deb10u1","1:68.5.0-1~deb8u1","1:68.5.0-1~deb9u1","1:68.6.0-1","1:68.6.0-1~deb10u1","1:68.6.0-1~deb8u1","1:68.6.0-1~deb9u1","1:68.7.0-1","1:68.7.0-1~deb10u1","1:68.7.0-1~deb8u1","1:68.7.0-1~deb9u1","1:68.8.0-1","1:68.8.0-1~deb10u1","1:68.8.0-1~deb8u1","1:68.8.0-1~deb9u1","1:68.8.1-1","1:68.9.0-1","1:68.9.0-1~deb10u1","1:68.9.0-1~deb8u1","1:68.9.0-1~deb8u2","1:68.9.0-1~deb9u1","1:76.0~b1-1","1:76.0~b2-1","1:77.0~b1-1","1:77.0~b2-1","1:77.0~b3-1","1:78.0-1","1:78.0.1-1","1:78.0~b1-1","1:78.0~b2-1","1:78.1.0-1","1:78.1.1-1","1:78.10.0-1","1:78.10.0-1~deb10u1","1:78.10.0-1~deb9u1","1:78.10.2-1","1:78.11.0-1","1:78.11.0-1~deb10u1","1:78.11.0-1~deb9u1","1:78.11.0-2","1:78.12.0-1","1:78.12.0-1~deb10u1","1:78.12.0-1~deb9u1","1:78.13.0-1","1:78.13.0-1~deb10u1","1:78.13.0-1~deb11u1","1:78.13.0-1~deb9u1","1:78.14.0-1","1:78.14.0-1~deb10u1","1:78.14.0-1~deb11u1","1:78.14.0-1~deb9u1","1:78.2.0-1","1:78.2.1-1","1:78.2.2-1","1:78.3.1-1","1:78.3.1-2","1:78.3.1-2~deb10u1","1:78.3.1-2~deb10u2","1:78.3.1-2~deb9u1","1:78.3.2-1","1:78.3.3-1","1:78.4.0-1","1:78.4.0-1~deb10u1","1:78.4.0-1~deb9u1","1:78.4.1-1","1:78.4.2-1","1:78.4.2-1~deb10u1","1:78.4.2-1~deb9u1","1:78.5.0-1","1:78.5.0-1~deb10u1","1:78.5.0-1~deb9u1","1:78.5.1-1","1:78.5.1-1~deb10u1","1:78.5.1-1~deb9u1","1:78.6.0-1","1:78.6.0-1~deb10u1","1:78.6.0-1~deb9u1","1:78.6.1-1","1:78.7.0-1","1:78.7.0-1~deb10u1","1:78.7.0-1~deb9u1","1:78.7.1-1","1:78.8.0-1","1:78.8.0-1~deb10u1","1:78.8.0-1~deb9u1","1:78.9.0-1","1:78.9.0-1~deb10u1","1:78.9.0-1~deb9u1","1:84.0~b3-1","1:85.0~b3-1","1:86.0~b3-1","1:88.0~b2-1","1:89.0~b2-1","1:90.0~b2-1","1:91.0-1","1:91.0.2-1","1:91.0~b1-1","1:91.0~b3-1","1:91.0~b5-1","1:91.1.0-1","1:91.1.1-1","1:91.10.0-1","1:91.10.0-1~deb10u1","1:91.10.0-1~deb11u1","1:91.10.0-1~deb9u1","1:91.11.0-1","1:91.11.0-1~deb10u1","1:91.11.0-1~deb11u1","1:91.12.0-1~deb10u1","1:91.12.0-1~deb11u1","1:91.13.0-1~deb10u1","1:91.13.0-1~deb11u1","1:91.2.0-1","1:91.2.1-1","1:91.3.0-1","1:91.3.2-1","1:91.4.0-1","1:91.4.1-1","1:91.4.1-1~deb10u1","1:91.4.1-1~deb11u1","1:91.4.1-1~deb9u1","1:91.5.0-1","1:91.5.0-1~deb9u1","1:91.5.0-2","1:91.5.0-2~deb10u1","1:91.5.0-2~deb11u1","1:91.5.1-1","1:91.6.0-1","1:91.6.0-1~deb10u1","1:91.6.0-1~deb11u1","1:91.6.0-1~deb9u1","1:91.6.1-1","1:91.6.1-1~deb10u1","1:91.6.1-1~deb11u1","1:91.6.1-1~deb9u1","1:91.6.2-1","1:91.6.2-1~deb10u1","1:91.6.2-1~deb11u1","1:91.6.2-1~deb9u1","1:91.7.0-1","1:91.7.0-2","1:91.7.0-2~deb10u1","1:91.7.0-2~deb11u1","1:91.7.0-2~deb9u1","1:91.8.0-1","1:91.8.0-1~deb10u1","1:91.8.0-1~deb11u1","1:91.8.0-1~deb9u1","1:91.8.1-1","1:91.9.0-1","1:91.9.0-1~deb10u1","1:91.9.0-1~deb11u1","1:91.9.0-1~deb9u1"],"bundled":12},{"source":"osv","ecosystem":"Debian:11","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:102.10.0-1~deb11u1"}]}],"versions":["1:102.0.1-1","1:102.0.2-1","1:102.0~b4-1","1:102.0~b7-1","1:102.1.0-1","1:102.1.1-1","1:102.1.2-1","1:102.10.0-1~deb10u1","1:102.2.0-1","1:102.2.1-1","1:102.2.2-1","1:102.3.0-1","1:102.3.0-1~deb10u1","1:102.3.0-1~deb11u1","1:102.3.1-1","1:102.3.2-1","1:102.3.3-1","1:102.4.0-1","1:102.4.0-1~deb10u1","1:102.4.0-1~deb11u1","1:102.4.1-1","1:102.5.0-1","1:102.5.0-1~deb10u1","1:102.5.0-1~deb11u1","1:102.5.1-1","1:102.6.0-1","1:102.6.0-1~deb10u1","1:102.6.0-1~deb11u1","1:102.7.1+1-1","1:102.7.1-1","1:102.7.2-1","1:102.8.0-1","1:102.8.0-1~deb10u1","1:102.8.0-1~deb11u1","1:102.9.0-1","1:102.9.0-1~deb10u1","1:102.9.0-1~deb11u1","1:102.9.1-1","1:78.12.0-1","1:78.13.0-1","1:78.13.0-1~deb10u1","1:78.13.0-1~deb11u1","1:78.13.0-1~deb9u1","1:78.14.0-1","1:78.14.0-1~deb10u1","1:78.14.0-1~deb11u1","1:78.14.0-1~deb9u1","1:84.0~b3-1","1:85.0~b3-1","1:86.0~b3-1","1:88.0~b2-1","1:89.0~b2-1","1:90.0~b2-1","1:91.0-1","1:91.0.2-1","1:91.0~b1-1","1:91.0~b3-1","1:91.0~b5-1","1:91.1.0-1","1:91.1.1-1","1:91.10.0-1","1:91.10.0-1~deb10u1","1:91.10.0-1~deb11u1","1:91.10.0-1~deb9u1","1:91.11.0-1","1:91.11.0-1~deb10u1","1:91.11.0-1~deb11u1","1:91.12.0-1~deb10u1","1:91.12.0-1~deb11u1","1:91.13.0-1~deb10u1","1:91.13.0-1~deb11u1","1:91.2.0-1","1:91.2.1-1","1:91.3.0-1","1:91.3.2-1","1:91.4.0-1","1:91.4.1-1","1:91.4.1-1~deb10u1","1:91.4.1-1~deb11u1","1:91.4.1-1~deb9u1","1:91.5.0-1","1:91.5.0-1~deb9u1","1:91.5.0-2","1:91.5.0-2~deb10u1","1:91.5.0-2~deb11u1","1:91.5.1-1","1:91.6.0-1","1:91.6.0-1~deb10u1","1:91.6.0-1~deb11u1","1:91.6.0-1~deb9u1","1:91.6.1-1","1:91.6.1-1~deb10u1","1:91.6.1-1~deb11u1","1:91.6.1-1~deb9u1","1:91.6.2-1","1:91.6.2-1~deb10u1","1:91.6.2-1~deb11u1","1:91.6.2-1~deb9u1","1:91.7.0-1","1:91.7.0-2","1:91.7.0-2~deb10u1","1:91.7.0-2~deb11u1","1:91.7.0-2~deb9u1","1:91.8.0-1","1:91.8.0-1~deb10u1","1:91.8.0-1~deb11u1","1:91.8.0-1~deb9u1","1:91.8.1-1","1:91.9.0-1","1:91.9.0-1~deb10u1","1:91.9.0-1~deb11u1","1:91.9.0-1~deb9u1"],"bundled":12},{"source":"osv","ecosystem":"npm","package":"matrix-js-sdk","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"24.0.0"}]}]},{"source":"osv","ecosystem":"Mageia:8","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"102.9.1-1.mga8"}]}]},{"source":"osv","ecosystem":"Mageia:8","package":"thunderbird-l10n","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"102.9.1-1.mga8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.10.0-2.el8_7"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.10.0-2.el8_7"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"thunderbird-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.10.0-2.el8_7"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.1::appstream","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.10.0-2.el8_1"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.1::appstream","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.10.0-2.el8_1"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.1::appstream","package":"thunderbird-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.10.0-2.el8_1"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::appstream","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.10.0-2.el8_4"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::appstream","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.10.0-2.el8_4"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::appstream","package":"thunderbird-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.10.0-2.el8_4"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.10.0-2.el8_2"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.10.0-2.el8_2"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"thunderbird-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.10.0-2.el8_2"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.2::appstream","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.10.0-2.el8_2"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.2::appstream","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.10.0-2.el8_2"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.2::appstream","package":"thunderbird-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.10.0-2.el8_2"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.2::appstream","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.10.0-2.el8_2"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.2::appstream","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.10.0-2.el8_2"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.2::appstream","package":"thunderbird-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.10.0-2.el8_2"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.10.0-2.el7_9"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.10.0-2.el7_9"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.10.0-2.el7_9"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.10.0-2.el7_9"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.10.0-2.el7_9"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.10.0-2.el7_9"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.10.0-2.el9_1"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.10.0-2.el9_1"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"thunderbird-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.10.0-2.el9_1"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.10.0-2.el9_0"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.10.0-2.el9_0"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"thunderbird-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.10.0-2.el9_0"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.10.0-2.el8_6"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.10.0-2.el8_6"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"thunderbird-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.10.0-2.el8_6"}]}],"bundled":12},{"source":"osv","ecosystem":"Rocky Linux:8","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.10.0-2.el8_7"}]}],"bundled":11},{"source":"osv","ecosystem":"Rocky Linux:9","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:102.10.0-2.el9_1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP4","package":"MozillaThunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"102.9.1-150200.8.110.2"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 15 SP4","package":"MozillaThunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"102.9.1-150200.8.110.2"}]}],"bundled":7},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"MozillaThunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"102.9.1-150200.8.110.2"}]}],"bundled":7},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"node-matrix-js-sdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.9.2-1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"node-matrix-js-sdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["9.3.0+~cs9.9.16-2","9.11.0+~cs9.9.16-1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"node-matrix-js-sdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["9.11.0+~cs9.9.16-2"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"element-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.11.26-1.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"MozillaThunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"102.10.0-1.1"}]}],"bundled":15}],"products":[{"vendor":"matrix","product":"javascript_sdk"},{"vendor":"matrix-org","product":"matrix-js-sdk"}],"references":[{"url":"https://github.com/matrix-org/matrix-js-sdk/security/advisories/GHSA-mwq8-fjpf-c2gr","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","advisory","web","article","report"]},{"url":"https://matrix.org/blog/2023/03/28/security-releases-matrix-js-sdk-24-0-0-and-matrix-react-sdk-3-69-0","tags":["x_refsource_MISC","x_transferred","Vendor Advisory","article","web","report"]},{"url":"https://www.debian.org/security/2023/dsa-5392","tags":["x_transferred","advisory","web"]},{"url":"https://lists.debian.org/debian-lts-announce/2023/04/msg00027.html","tags":["x_transferred","web"]},{"url":"https://security.gentoo.org/glsa/202305-36","tags":["x_transferred","advisory","web"]},{"url":"https://github.com/matrix-org/matrix-js-sdk/security/advisories/GHSA-rfv9-x7hh-xc32","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-28427","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-mwq8-fjpf-c2gr"},{"url":"https://security.alpinelinux.org/vuln/CVE-2023-28427","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:1802","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-0547","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-1945","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-28427","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-29479","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-29533","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-29535","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-29536","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-29539","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-29541","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-29548","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-29550","tags":["report"]},{"url":"https://bugzilla.redhat.com/2183278","tags":["report"]},{"url":"https://bugzilla.redhat.com/2186101","tags":["report"]},{"url":"https://bugzilla.redhat.com/2186103","tags":["report"]},{"url":"https://bugzilla.redhat.com/2186104","tags":["report"]},{"url":"https://bugzilla.redhat.com/2186105","tags":["report"]},{"url":"https://bugzilla.redhat.com/2186106","tags":["report"]},{"url":"https://bugzilla.redhat.com/2186109","tags":["report"]},{"url":"https://bugzilla.redhat.com/2186110","tags":["report"]},{"url":"https://bugzilla.redhat.com/2186111","tags":["report"]},{"url":"https://bugzilla.redhat.com/2186734","tags":["report"]},{"url":"https://bugzilla.redhat.com/2186735","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2023-1802.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:1809","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALSA-2023-1809.html","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/28xxx/CVE-2023-28427.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2023-28427","tags":["advisory"]},{"url":"https://github.com/matrix-org/matrix-js-sdk","tags":["package"]},{"url":"https://advisories.mageia.org/MGASA-2023-0132.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=31734","tags":["report"]},{"url":"https://www.thunderbird.net/en-US/thunderbird/102.9.1/releasenotes/","tags":["web"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2023-12/","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2183278","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2186101","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2186102","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2186103","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2186104","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2186105","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2186106","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2186109","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2186110","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2186111","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2186734","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2186735","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_1802.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-0547","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-0547","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2023-15/#CVE-2023-0547","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-1945","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-1945","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2023-14/#CVE-2023-1945","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-1999","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-1999","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-1999","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2023-14/#CVE-2023-1999","tags":["article"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2023-15/#CVE-2023-1999","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-28427","tags":["advisory","report"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2023-12/#CVE-2023-28427","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-29479","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-29479","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2023-15/#CVE-2023-29479","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-29533","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-29533","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2023-14/#CVE-2023-29533","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-29535","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-29535","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2023-14/#CVE-2023-29535","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-29536","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-29536","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2023-14/#CVE-2023-29536","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-29539","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-29539","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2023-14/#CVE-2023-29539","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-29541","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-29541","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2023-14/#CVE-2023-29541","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-29548","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-29548","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2023-14/#CVE-2023-29548","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-29550","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-29550","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2023-14/#CVE-2023-29550","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2023:1803","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_1803.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:1804","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_1804.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:1805","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_1805.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:1806","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_1806.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_1809.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:1810","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_1810.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:1811","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_1811.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2023:1802","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2023:1809","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20231736-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1209173","tags":["report"]},{"url":"https://bugzilla.suse.com/1209953","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2023-25751","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-25752","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-28162","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-28163","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-28164","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-28176","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-28427","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2023-28427","tags":["report"]},{"url":"https://matrix.org/blog/2023/03/28/security-releases-matrix-js-sdk-24-0-0-and-matrix-react-sdk-3-69-0/","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2023-0547","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-1945","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-29479","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-29531","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-29532","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-29533","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-29535","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-29536","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-29539","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-29541","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-29542","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-29545","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-29548","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-29550","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2023-28427","title":"Prototype pollution in matrix-js-sdk","description":"matrix-js-sdk is a Matrix messaging protocol Client-Server SDK for JavaScript. In versions prior to 24.0.0 events sent with special strings in key places can temporarily disrupt or impede the matrix-js-sdk from functioning properly, potentially impacting the consumer's ability to process data safely. Note that the matrix-js-sdk can appear to be operating normally but be excluding or corrupting runtime data presented to the consumer. This vulnerability is distinct from GHSA-rfv9-x7hh-xc32 which covers a similar issue. The issue has been patched in matrix-js-sdk 24.0.0 and users are advised to upgrade. There are no known workarounds for this vulnerability.","status":"published","published":"2023-03-28T20:32:22.116Z","modified":"2025-02-18T20:03:47.555Z","cvss":[{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-1321"],"updated_at":"2026-11-02T14:35:32.376766Z"}],"euvd":[{"id":"EUVD-2023-1061","description":"matrix-js-sdk is a Matrix messaging protocol Client-Server SDK for JavaScript. In versions prior to 24.0.0 events sent with special strings in key places can temporarily disrupt or impede the matrix-js-sdk from functioning properly, potentially impacting the consumer's ability to process data safely. Note that the matrix-js-sdk can appear to be operating normally but be excluding or corrupting runtime data presented to the consumer. This vulnerability is distinct from GHSA-rfv9-x7hh-xc32 which covers a similar issue. The issue has been patched in matrix-js-sdk 24.0.0 and users are advised to upgrade. There are no known workarounds for this vulnerability.","status":"published","published":"2023-03-28T20:32:22Z","modified":"2025-02-18T20:03:47Z","cvss":[{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H","level":"high"}],"updated_at":"2026-11-02T20:53:27.843209Z"}],"ghsa":[{"id":"GHSA-mwq8-fjpf-c2gr","title":"Prototype pollution in matrix-js-sdk (part 2)","description":"### Impact\n\nIn certain configurations, data sent by remote servers containing special strings in key locations could cause modifications of the `Object.prototype`, disrupting matrix-js-sdk functionality, causing denial of service and potentially affecting program logic.\n\n(This is part 2, where [CVE-2022-36059](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36059) / [GHSA-rfv9-x7hh-xc32](https://github.com/matrix-org/matrix-js-sdk/security/advisories/GHSA-rfv9-x7hh-xc32) is part 1. Part 2 covers remaining vectors not covered by part 1, found in a codebase audit scheduled after part 1.)\n\n### Patches\nThe issue has been patched in matrix-js-sdk 24.0.0.\n\n### Workarounds\nNone.\n\n### References\n\n- [Release blog post](https://matrix.org/blog/2023/03/28/security-releases-matrix-js-sdk-24-0-0-and-matrix-react-sdk-3-69-0)\n- The advisory [GHSA-rfv9-x7hh-xc32](https://github.com/matrix-org/matrix-js-sdk/security/advisories/GHSA-rfv9-x7hh-xc32) ([CVE-2022-36059](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36059)) refers to an initial set of vulnerable locations discovered and patched in matrix-js-sdk 19.4.0. We opted not to disclose that advisory while we performed an audit of the codebase and are now disclosing it jointly with this one.\n\n### For more information\nIf you have any questions or comments about this advisory please email us at [security at matrix.org](mailto:security@matrix.org).\n","status":"published","published":"2023-03-30T20:19:18Z","modified":"2023-05-30T06:44:16Z","cvss":[{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H","level":"high"}],"cwes":["CWE-1321"],"updated_at":"2026-11-02T14:36:53.103029Z"}],"nvd":[{"id":"CVE-2023-28427","description":"matrix-js-sdk is a Matrix messaging protocol Client-Server SDK for JavaScript. In versions prior to 24.0.0 events sent with special strings in key places can temporarily disrupt or impede the matrix-js-sdk from functioning properly, potentially impacting the consumer's ability to process data safely. Note that the matrix-js-sdk can appear to be operating normally but be excluding or corrupting runtime data presented to the consumer. This vulnerability is distinct from GHSA-rfv9-x7hh-xc32 which covers a similar issue. The issue has been patched in matrix-js-sdk 24.0.0 and users are advised to upgrade. There are no known workarounds for this vulnerability.","status":"published","published":"2023-03-28T21:15:11.057Z","modified":"2026-06-17T05:47:41.563Z","cvss":[{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H","level":"high","assessor":"secondary"},{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-1321"],"updated_at":"2026-11-02T14:07:51.883939Z"}],"osv":[{"id":"ALPINE-CVE-2023-28427","description":"matrix-js-sdk is a Matrix messaging protocol Client-Server SDK for JavaScript. In versions prior to 24.0.0 events sent with special strings in key places can temporarily disrupt or impede the matrix-js-sdk from functioning properly, potentially impacting the consumer's ability to process data safely. Note that the matrix-js-sdk can appear to be operating normally but be excluding or corrupting runtime data presented to the consumer. This vulnerability is distinct from GHSA-rfv9-x7hh-xc32 which covers a similar issue. The issue has been patched in matrix-js-sdk 24.0.0 and users are advised to upgrade. There are no known workarounds for this vulnerability.","status":"published","published":"2023-03-28T21:15:11.057Z","modified":"2026-11-03T06:32:48.333733064Z","cvss":[{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H","level":"high"}],"updated_at":"2026-11-03T07:16:46.202932Z"},{"id":"CVE-2023-28427","title":"Prototype pollution in matrix-js-sdk","description":"matrix-js-sdk is a Matrix messaging protocol Client-Server SDK for JavaScript. In versions prior to 24.0.0 events sent with special strings in key places can temporarily disrupt or impede the matrix-js-sdk from functioning properly, potentially impacting the consumer's ability to process data safely. Note that the matrix-js-sdk can appear to be operating normally but be excluding or corrupting runtime data presented to the consumer. This vulnerability is distinct from GHSA-rfv9-x7hh-xc32 which covers a similar issue. The issue has been patched in matrix-js-sdk 24.0.0 and users are advised to upgrade. There are no known workarounds for this vulnerability.","status":"published","published":"2023-03-28T20:32:22.116Z","modified":"2026-10-28T02:30:44.615420042Z","cvss":[{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H","level":"high"}],"cwes":["CWE-1321"],"updated_at":"2026-11-02T15:44:31.468318Z"},{"id":"DEBIAN-CVE-2023-28427","description":"matrix-js-sdk is a Matrix messaging protocol Client-Server SDK for JavaScript. In versions prior to 24.0.0 events sent with special strings in key places can temporarily disrupt or impede the matrix-js-sdk from functioning properly, potentially impacting the consumer's ability to process data safely. Note that the matrix-js-sdk can appear to be operating normally but be excluding or corrupting runtime data presented to the consumer. This vulnerability is distinct from GHSA-rfv9-x7hh-xc32 which covers a similar issue. The issue has been patched in matrix-js-sdk 24.0.0 and users are advised to upgrade. There are no known workarounds for this vulnerability.","status":"published","published":"2023-03-28T21:15:11.057Z","modified":"2026-10-26T18:01:02.087265078Z","cvss":[{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:39.679062Z"},{"id":"GHSA-mwq8-fjpf-c2gr","title":"Prototype pollution in matrix-js-sdk (part 2)","description":"### Impact\n\nIn certain configurations, data sent by remote servers containing special strings in key locations could cause modifications of the `Object.prototype`, disrupting matrix-js-sdk functionality, causing denial of service and potentially affecting program logic.\n\n(This is part 2, where [CVE-2022-36059](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36059) / [GHSA-rfv9-x7hh-xc32](https://github.com/matrix-org/matrix-js-sdk/security/advisories/GHSA-rfv9-x7hh-xc32) is part 1. Part 2 covers remaining vectors not covered by part 1, found in a codebase audit scheduled after part 1.)\n\n### Patches\nThe issue has been patched in matrix-js-sdk 24.0.0.\n\n### Workarounds\nNone.\n\n### References\n\n- [Release blog post](https://matrix.org/blog/2023/03/28/security-releases-matrix-js-sdk-24-0-0-and-matrix-react-sdk-3-69-0)\n- The advisory [GHSA-rfv9-x7hh-xc32](https://github.com/matrix-org/matrix-js-sdk/security/advisories/GHSA-rfv9-x7hh-xc32) ([CVE-2022-36059](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36059)) refers to an initial set of vulnerable locations discovered and patched in matrix-js-sdk 19.4.0. We opted not to disclose that advisory while we performed an audit of the codebase and are now disclosing it jointly with this one.\n\n### For more information\nIf you have any questions or comments about this advisory please email us at [security at matrix.org](mailto:security@matrix.org).\n","status":"published","published":"2023-03-30T20:19:18Z","modified":"2026-09-10T03:49:52.851933001Z","cvss":[{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H","level":"high"}],"cwes":["CWE-1321"],"updated_at":"2026-11-02T15:46:52.534897Z"},{"id":"RHSA-2023:1802","title":"Red Hat Security Advisory: thunderbird security update","status":"published","published":"2024-09-22T22:25:15Z","modified":"2026-08-20T10:03:51Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:10.611604Z"},{"id":"RHSA-2023:1803","title":"Red Hat Security Advisory: thunderbird security update","status":"published","published":"2024-09-22T22:25:05Z","modified":"2026-08-20T10:03:52Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:10.611604Z"},{"id":"RHSA-2023:1804","title":"Red Hat Security Advisory: thunderbird security update","status":"published","published":"2024-09-22T22:24:23Z","modified":"2026-08-20T10:03:53Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:10.611604Z"},{"id":"RHSA-2023:1805","title":"Red Hat Security Advisory: thunderbird security update","status":"published","published":"2024-09-22T22:24:14Z","modified":"2026-08-20T10:03:53Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:10.611604Z"},{"id":"RHSA-2023:1806","title":"Red Hat Security Advisory: thunderbird security update","status":"published","published":"2024-09-22T22:24:04Z","modified":"2026-08-20T10:03:54Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:10.611604Z"},{"id":"RHSA-2023:1809","title":"Red Hat Security Advisory: thunderbird security update","status":"published","published":"2024-09-22T22:24:52Z","modified":"2026-08-20T10:03:55Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:10.611604Z"},{"id":"RHSA-2023:1810","title":"Red Hat Security Advisory: thunderbird security update","status":"published","published":"2024-09-22T22:24:43Z","modified":"2026-08-20T10:03:55Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:10.611604Z"},{"id":"RHSA-2023:1811","title":"Red Hat Security Advisory: thunderbird security update","status":"published","published":"2024-09-22T22:24:33Z","modified":"2026-08-20T10:03:56Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:10.611604Z"},{"id":"UBUNTU-CVE-2023-28427","description":"matrix-js-sdk is a Matrix messaging protocol Client-Server SDK for JavaScript. In versions prior to 24.0.0 events sent with special strings in key places can temporarily disrupt or impede the matrix-js-sdk from functioning properly, potentially impacting the consumer's ability to process data safely. Note that the matrix-js-sdk can appear to be operating normally but be excluding or corrupting runtime data presented to the consumer. This vulnerability is distinct from GHSA-rfv9-x7hh-xc32 which covers a similar issue. The issue has been patched in matrix-js-sdk 24.0.0 and users are advised to upgrade. There are no known workarounds for this vulnerability.","status":"published","published":"2023-03-28T21:15:00Z","modified":"2025-10-24T05:01:53Z","cvss":[{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H","level":"high"},{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H","level":"high"}],"updated_at":"2026-11-02T16:54:20.997471Z"},{"id":"ALSA-2023:1802","title":"Important: thunderbird security update","description":"Mozilla Thunderbird is a standalone mail and newsgroup client.\n\nThis update upgrades Thunderbird to version 102.10.0.\n\nSecurity Fix(es):\n\n* Thunderbird: Revocation status of S/Mime recipient certificates was not checked (CVE-2023-0547)\n* Mozilla: Matrix SDK bundled with Thunderbird vulnerable to denial-of-service attack (CVE-2023-28427)\n* Mozilla: Fullscreen notification obscured (CVE-2023-29533)\n* Mozilla: Potential Memory Corruption following Garbage Collector compaction (CVE-2023-29535)\n* Mozilla: Invalid free from JavaScript code (CVE-2023-29536)\n* Mozilla: Memory safety bugs fixed in Firefox 112 and Firefox ESR 102.10 (CVE-2023-29550)\n* Mozilla: Memory Corruption in Safe Browsing Code (CVE-2023-1945)\n* Thunderbird: Hang when processing certain OpenPGP messages (CVE-2023-29479)\n* Mozilla: Content-Disposition filename truncation leads to Reflected File Download (CVE-2023-29539)\n* Mozilla: Files with malicious extensions could have been downloaded unsafely on Linux (CVE-2023-29541)\n* Mozilla: Incorrect optimization result on ARM64 (CVE-2023-29548)\n* MFSA-TMP-2023-0001 Mozilla: Double-free in libwebp (BZ#2186102)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2023-04-17T00:00:00Z","modified":"2026-10-29T11:01:37.033046228Z","updated_at":"2026-11-02T15:27:51.655726Z"},{"id":"ALSA-2023:1809","title":"Important: thunderbird security update","description":"Mozilla Thunderbird is a standalone mail and newsgroup client.\n\nThis update upgrades Thunderbird to version 102.10.0.\n\nSecurity Fix(es):\n\n* Thunderbird: Revocation status of S/Mime recipient certificates was not checked (CVE-2023-0547)\n* Mozilla: Matrix SDK bundled with Thunderbird vulnerable to denial-of-service attack (CVE-2023-28427)\n* Mozilla: Fullscreen notification obscured (CVE-2023-29533)\n* Mozilla: Potential Memory Corruption following Garbage Collector compaction (CVE-2023-29535)\n* Mozilla: Invalid free from JavaScript code (CVE-2023-29536)\n* Mozilla: Memory safety bugs fixed in Firefox 112 and Firefox ESR 102.10 (CVE-2023-29550)\n* Mozilla: Memory Corruption in Safe Browsing Code (CVE-2023-1945)\n* Thunderbird: Hang when processing certain OpenPGP messages (CVE-2023-29479)\n* Mozilla: Content-Disposition filename truncation leads to Reflected File Download (CVE-2023-29539)\n* Mozilla: Files with malicious extensions could have been downloaded unsafely on Linux (CVE-2023-29541)\n* Mozilla: Incorrect optimization result on ARM64 (CVE-2023-29548)\n* MFSA-TMP-2023-0001 Mozilla: Double-free in libwebp (BZ#2186102)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2023-04-17T00:00:00Z","modified":"2026-10-29T11:30:55.325559472Z","updated_at":"2026-11-02T15:27:51.655726Z"},{"id":"DLA-3400-1","title":"thunderbird - security update","status":"published","published":"2023-04-24T00:00:00Z","modified":"2026-03-09T01:22:11.9185Z","updated_at":"2026-11-02T15:46:11.734021Z"},{"id":"DSA-5392-1","title":"thunderbird - security update","status":"published","published":"2023-04-22T00:00:00Z","modified":"2026-03-09T02:10:45.754932Z","updated_at":"2026-11-02T15:46:17.543497Z"},{"id":"MGASA-2023-0132","title":"Updated thunderbird packages fix security vulnerability","description":"Matrix SDK bundled with Thunderbird vulnerable to denial-of-service\nattack. (CVE-2023-28427)\n","status":"published","published":"2023-04-11T19:02:20Z","modified":"2026-04-16T04:44:22.554727394Z","updated_at":"2026-11-02T15:49:42.263076Z"},{"id":"openSUSE-SU-2024:12823-1","title":"element-web-1.11.26-1.1 on GA media","description":"These are all security issues fixed in the element-web-1.11.26-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:22:38.762264Z","updated_at":"2026-11-02T16:58:35.751245Z"},{"id":"openSUSE-SU-2024:12852-1","title":"MozillaThunderbird-102.10.0-1.1 on GA media","description":"These are all security issues fixed in the MozillaThunderbird-102.10.0-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:58:50.114423Z","updated_at":"2026-11-02T16:58:36.025801Z"},{"id":"RLSA-2023:1802","title":"Important: thunderbird security update","description":"Mozilla Thunderbird is a standalone mail and newsgroup client.\n\nThis update upgrades Thunderbird to version 102.10.0.\n\nSecurity Fix(es):\n\n* Thunderbird: Revocation status of S/Mime recipient certificates was not checked (CVE-2023-0547)\n\n* Mozilla: Matrix SDK bundled with Thunderbird vulnerable to denial-of-service attack (CVE-2023-28427)\n\n* Mozilla: Fullscreen notification obscured (CVE-2023-29533)\n\n* Mozilla: Potential Memory Corruption following Garbage Collector compaction (CVE-2023-29535)\n\n* Mozilla: Invalid free from JavaScript code (CVE-2023-29536)\n\n* Mozilla: Memory safety bugs fixed in Firefox 112 and Firefox ESR 102.10 (CVE-2023-29550)\n\n* Mozilla: Memory Corruption in Safe Browsing Code (CVE-2023-1945)\n\n* Thunderbird: Hang when processing certain OpenPGP messages (CVE-2023-29479)\n\n* Mozilla: Content-Disposition filename truncation leads to Reflected File Download (CVE-2023-29539)\n\n* Mozilla: Files with malicious extensions could have been downloaded unsafely on Linux (CVE-2023-29541)\n\n* Mozilla: Incorrect optimization result on ARM64 (CVE-2023-29548)\n\n* MFSA-TMP-2023-0001 Mozilla: Double-free in libwebp (BZ#2186102)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2023-04-26T15:28:13.052501Z","modified":"2026-02-04T10:45:04.792027Z","updated_at":"2026-11-02T15:53:24.322216Z"},{"id":"RLSA-2023:1809","title":"Important: thunderbird security update","description":"Mozilla Thunderbird is a standalone mail and newsgroup client.\n\nThis update upgrades Thunderbird to version 102.10.0.\n\nSecurity Fix(es):\n\n* Thunderbird: Revocation status of S/Mime recipient certificates was not checked (CVE-2023-0547)\n\n* Mozilla: Matrix SDK bundled with Thunderbird vulnerable to denial-of-service attack (CVE-2023-28427)\n\n* Mozilla: Fullscreen notification obscured (CVE-2023-29533)\n\n* Mozilla: Potential Memory Corruption following Garbage Collector compaction (CVE-2023-29535)\n\n* Mozilla: Invalid free from JavaScript code (CVE-2023-29536)\n\n* Mozilla: Memory safety bugs fixed in Firefox 112 and Firefox ESR 102.10 (CVE-2023-29550)\n\n* Mozilla: Memory Corruption in Safe Browsing Code (CVE-2023-1945)\n\n* Thunderbird: Hang when processing certain OpenPGP messages (CVE-2023-29479)\n\n* Mozilla: Content-Disposition filename truncation leads to Reflected File Download (CVE-2023-29539)\n\n* Mozilla: Files with malicious extensions could have been downloaded unsafely on Linux (CVE-2023-29541)\n\n* Mozilla: Incorrect optimization result on ARM64 (CVE-2023-29548)\n\n* MFSA-TMP-2023-0001 Mozilla: Double-free in libwebp (BZ#2186102)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2023-04-26T15:29:00.826784Z","modified":"2026-02-05T10:45:10.175687Z","updated_at":"2026-11-02T15:53:24.322216Z"},{"id":"SUSE-SU-2023:1736-1","title":"Security update for MozillaThunderbird","description":"This update for MozillaThunderbird fixes the following issues:\n\nMFSA 2023-12 (bsc#1209953):\n\n- CVE-2023-28427: Matrix SDK bundled with Thunderbird vulnerable to denial-of-service attack (bmo#1822595)\n\nMFSA 2023-11 (bsc#1209173):\n\n- CVE-2023-25751: Incorrect code generation during JIT compilation (bmo#1814899).\n- CVE-2023-28164: URL being dragged from a removed cross-origin iframe into the same tab triggered navigation (bmo#1809122).\n- CVE-2023-28162: Invalid downcast in Worklets (bmo#1811327).\n- CVE-2023-25752: Potential out-of-bounds when accessing throttled streams (bmo#1811627).\n- CVE-2023-28163: Windows Save As dialog resolved environment variables (bmo#1817768)\n- CVE-2023-28176: Memory safety bugs fixed in Thunderbird 102.9 (bmo#1808352, bmo#1811637, bmo#1815904, bmo#1817442, bmo#1818674).\n  \nMozilla Thunderbird 102.9:\n  \n- fixed: Notification about a sender's changed OpenPGP key was not immediately visible (bmo#1814003)\n- fixed: TLS Certificate Override dialog did not appear when retrieving messages via IMAP using 'Get Messages' context menu (bmo#1816596)\n- fixed: Spellcheck dictionaries were missing from localized Thunderbird builds that should have included them (bmo#1818257)\n- fixed: Tooltips for 'Show/Hide' calendar toggle did not display (bmo#1809557)\n- fixed: Various security fixes  \n    \nMozilla Thunderbird 102.9.1:\n\n- fixed: Thunderbird was unable to open file URLs from command line (URLs beginning with 'file://') (bmo#1816343)\n- fixed: Source strings for localized builds not uploaded to FTP as expected (bmo#1817086)\n- fixed: Visual and theme improvements (bmo#1821358, bmo#1822286)\n- fixed: Security fixes\n","status":"published","published":"2023-04-03T11:12:58Z","modified":"2026-02-04T02:47:54.780778Z","updated_at":"2026-11-02T15:53:52.350754Z"}]}}