Product by Matrix-org
Matrix-react-sdk
8 known vulnerabilities in Matrix-react-sdk (Matrix-org), 0 of them actively exploited (CISA KEV).
Key figures
8
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2022-36060 | Prototype pollution in matrix-react-sdk | 8.2 | |
| High | CVE-2024-47824 | Matrix-org Matrix-react-sdk: Exposure of Sensitive Information to an Unauthorized Actor | — | |
| High | CVE-2023-28103 | Prototype pollution in matrix-react-sdk | 8.2 | |
| High | CVE-2024-42347 | URL preview setting for a room is controllable by the homeserver in matrix-react-sdk | 7.7 | |
| Medium | CVE-2023-30609 | matrix-react-sdk vulnerable to HTML injection in search results via plaintext message highlighting | 5.4 | |
| Medium | CVE-2023-37259 | Cross site scripting in Export Chat feature | 6.1 | |
| Medium | CVE-2021-21320 | User content sandbox can be confused into opening arbitrary documents | 2.6 | |
| High | CVE-2021-32622 | File upload local preview can run embedded scripts after user interaction | 4.2 |