node-matrix-js-sdk vulnerabilities (Debian)
9 vulnerabilities.
-
node-matrix-js-sdkDebian matrix-js-sdk has insufficient validation when considering a room to be upgraded by another 2.7 Low -
node-matrix-js-sdkDebian matrix-js-sdk keys sent via `sendSharedHistoryKeys` vulnerable to interception by malicious homeserver 8.7 High -
node-matrix-js-sdkDebian A room with itself as a its predecessor will freeze matrix-js-sdk 4.1 Medium -
node-matrix-js-sdkDebian matrix-js-sdk vulnerable to invisible eavesdropping in group calls 5.0 Medium -
node-matrix-js-sdkDebian Matrix JavaScript SDK vulnerable to key/device identifier confusion in SAS verification 8.6 High -
node-matrix-js-sdkDebian Matrix Javascript SDK vulnerable to Olm/Megolm protocol confusion 8.6 High -
node-matrix-js-sdkDebian Matrix Javascript SDK vulnerable to impersonation via forwarded Megolm sessions 7.5 High -
node-matrix-js-sdkDebian Matrix Javascript SDK improper beacon events can cause availability issues 4.3 Medium -
node-matrix-js-sdkDebian matrix-js-sdk can be tricked into disclosing E2EE room keys to a participating homeserver 5.9 Medium