What’s Vulnerable › Products

matrix-org matrix-react-sdk vulnerabilities

6 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 0 published in the last 12 months.

Check whether your matrix-org matrix-react-sdk version is affected

Latest matrix-org matrix-react-sdk vulnerabilities

• CVE-2024-47824 — Malicious homeservers can steal message keys when the matrix-react-sdk user invites another user to a room (CVSS 8.7)
• CVE-2023-37259 — Cross site scripting in Export Chat feature (CVSS 5.4)
• CVE-2023-30609 — matrix-react-sdk vulnerable to HTML injection in search results via plaintext message highlighting (CVSS 4.7)
• CVE-2023-28103 — Prototype pollution in matrix-react-sdk (CVSS 8.2)
• CVE-2021-32622 — File upload local preview can run embedded scripts after user interaction (CVSS 7.8)
• CVE-2021-21320 — User content sandbox can be confused into opening arbitrary documents (CVSS 4.3)