matrix-js-sdk vulnerabilities (npm)
12 vulnerabilities.
-
matrix-js-sdknpm matrix-js-sdk has insufficient validation when considering a room to be upgraded by another 2.7 Low -
matrix-js-sdknpm matrix-js-sdk has insufficient MXC URI validation which allows client-side path traversal 5.3 Medium -
matrix-js-sdknpm matrix-js-sdk keys sent via `sendSharedHistoryKeys` vulnerable to interception by malicious homeserver 8.7 High -
matrix-js-sdknpm A room with itself as a its predecessor will freeze matrix-js-sdk 4.1 Medium -
matrix-js-sdknpm matrix-js-sdk vulnerable to invisible eavesdropping in group calls 5.0 Medium -
matrix-js-sdknpm Prototype pollution in matrix-js-sdk 8.2 High -
matrix-js-sdknpm Matrix JavaScript SDK vulnerable to key/device identifier confusion in SAS verification 8.6 High -
matrix-js-sdknpm Matrix Javascript SDK vulnerable to Olm/Megolm protocol confusion 8.6 High -
matrix-js-sdknpm Matrix Javascript SDK vulnerable to impersonation via forwarded Megolm sessions 7.5 High -
matrix-js-sdknpm Matrix Javascript SDK improper beacon events can cause availability issues 4.3 Medium -
matrix-js-sdknpm Prototype pollution in matrix-js-sdk 8.2 High -
matrix-js-sdknpm matrix-js-sdk can be tricked into disclosing E2EE room keys to a participating homeserver 5.9 Medium