matrix-react-sdk vulnerabilities (npm)
8 vulnerabilities.
-
matrix-react-sdknpm Malicious homeservers can steal message keys when the matrix-react-sdk user invites another user to a room 8.7 High -
matrix-react-sdknpm URL preview setting for a room is controllable by the homeserver in matrix-react-sdk 7.7 High -
matrix-react-sdknpm Cross site scripting in Export Chat feature 6.1 Medium -
matrix-react-sdknpm matrix-react-sdk vulnerable to HTML injection in search results via plaintext message highlighting 5.4 Medium -
matrix-react-sdknpm Prototype pollution in matrix-react-sdk 8.2 High -
matrix-react-sdknpm Prototype pollution in matrix-react-sdk 8.2 High -
matrix-react-sdknpm File upload local preview can run embedded scripts after user interaction 4.2 Medium -
matrix-react-sdknpm User content sandbox can be confused into opening arbitrary documents 2.6 Low