node-matrix-js-sdk vulnerabilities (Ubuntu)
13 vulnerabilities.
-
node-matrix-js-sdkUbuntu matrix-js-sdk has insufficient validation when considering a room to be upgraded by another 2.7 Low -
node-matrix-js-sdkUbuntu matrix-js-sdk has insufficient MXC URI validation which allows client-side path traversal 5.3 Medium -
node-matrix-js-sdkUbuntu matrix-js-sdk keys sent via `sendSharedHistoryKeys` vulnerable to interception by malicious homeserver 8.7 High -
node-matrix-js-sdkUbuntu A room with itself as a its predecessor will freeze matrix-js-sdk 4.1 Medium -
node-matrix-js-sdkUbuntu matrix-js-sdk vulnerable to invisible eavesdropping in group calls 5.0 Medium -
node-matrix-js-sdkUbuntu Prototype pollution in matrix-js-sdk 8.2 High -
node-matrix-js-sdkUbuntu Matrix JavaScript SDK vulnerable to key/device identifier confusion in SAS verification 8.6 High -
node-matrix-js-sdkUbuntu Matrix Javascript SDK vulnerable to Olm/Megolm protocol confusion 8.6 High -
node-matrix-js-sdkUbuntu Matrix Javascript SDK vulnerable to impersonation via forwarded Megolm sessions 7.5 High -
node-matrix-js-sdkUbuntu Matrix Javascript SDK improper beacon events can cause availability issues 4.3 Medium -
node-matrix-js-sdkUbuntu Prototype pollution in matrix-js-sdk 8.2 High -
node-matrix-js-sdkUbuntu The olm_session_describe function in Matrix libolm before 3.2.7 is vulnerable to a buffer... 9.8 Critical -
node-matrix-js-sdkUbuntu matrix-js-sdk can be tricked into disclosing E2EE room keys to a participating homeserver 5.9 Medium