riot-web vulnerabilities (Alpine)

12 vulnerabilities.

• riot-web Alpine matrix-react-sdk vulnerable to HTML injection in search results via plaintext message highlighting CVE-2023-30609 Fix available 5.4 MediumApril 25, 2023
• riot-web Alpine Prototype pollution in matrix-react-sdk CVE-2023-28103 Fix available 8.2 HighMarch 28, 2023
• riot-web Alpine Prototype pollution in matrix-js-sdk CVE-2023-28427 Fix available 8.2 HighMarch 28, 2023
• riot-web Alpine Prototype pollution in matrix-react-sdk CVE-2022-36060 Fix available 8.2 HighMarch 28, 2023
• riot-web Alpine Matrix JavaScript SDK vulnerable to key/device identifier confusion in SAS verification CVE-2022-39250 Fix available 8.6 HighSeptember 29, 2022
• riot-web Alpine Matrix Javascript SDK vulnerable to Olm/Megolm protocol confusion CVE-2022-39251 Fix available 8.6 HighSeptember 28, 2022
• riot-web Alpine Matrix Javascript SDK vulnerable to impersonation via forwarded Megolm sessions CVE-2022-39249 Fix available 7.5 HighSeptember 28, 2022
• riot-web Alpine Matrix Javascript SDK improper beacon events can cause availability issues CVE-2022-39236 Fix available 4.3 MediumSeptember 28, 2022
• riot-web Alpine Prototype pollution in matrix-js-sdk CVE-2022-36059 Fix available 8.2 HighSeptember 1, 2022
• riot-web Alpine The olm_session_describe function in Matrix libolm before 3.2.7 is vulnerable to a buffer... CVE-2021-44538 Fix available 9.8 CriticalDecember 14, 2021
• riot-web Alpine Logic error in Matrix SDK for Android CVE-2021-40824 Fix available 5.9 MediumSeptember 13, 2021
• riot-web Alpine matrix-js-sdk can be tricked into disclosing E2EE room keys to a participating homeserver CVE-2021-40823 Fix available 5.9 MediumSeptember 13, 2021