Known vulnerabilities in Matrix Javascript SDK

Vendor: Matrix.org
Software CPE: cpe:2.3:a:matrix_org:matrix-js-sdk:*:*:*:*:*:*:*:*
Total vulnerabilities: 12
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Matrix Javascript SDK Matrix Javascript SDK is affected by 12 known vulnerabilities: 8 medium, 4 low Critical High Medium Low

Vulnerabilities (12)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU101796 - Improper input validation
CVE-2024-50336
CWE-20 Medium
No
No
34.11.1 16.12.2024 SB2024121637
SB2024121638
SB2024121639
and 6 more
#VU98728 - Missing Authorization
CVE-2024-47080
CWE-862 Medium
No
No
34.8.0 16.10.2024 SB2024101651
#VU96314 - Uncontrolled Recursion
CVE-2024-42369
CWE-674 Low
No
No
34.3.1 21.08.2024 SB2024082138
#VU75115 - Missing Authorization
CVE-2023-29529
CWE-862 Medium
No
No
24.1.0 14.04.2023 SB2023041409
#VU74153 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2023-28427
CWE-1321 Medium
No
No
24.0.0 29.03.2023 SB2023032905
SB2023032908
SB2023033002
and 15 more
#VU67745 - Insufficient Verification of Data Authenticity
CVE-2022-39250
CWE-345 Medium
No
No
19.7.0 29.09.2022 SB2022092924
SB2022092925
SB2022093040
and 12 more
#VU67744 - Improper input validation
CVE-2022-39236
CWE-20 Medium
No
No
19.7.0 29.09.2022 SB2022092924
SB2022092925
SB2022093040
and 12 more
#VU67743 - Insufficient Verification of Data Authenticity
CVE-2022-39251
CWE-345 Low
No
No
19.7.0 29.09.2022 SB2022092924
SB2022092925
SB2022093040
and 12 more
#VU67742 - Insufficient Verification of Data Authenticity
CVE-2022-39249
CWE-345 Low
No
No
19.7.0 29.09.2022 SB2022092924
SB2022092925
SB2022093040
and 12 more
#VU66922 - Improper input validation
CVE-2022-36059
CWE-20 Low
No
No
19.4.0 01.09.2022 SB2022090140
SB2022090306
SB2022090669
and 11 more
#VU59080 - Memory corruption
CVE-2021-44538
CWE-119 Medium
No
No
15.2.1 21.12.2021 SB2021122103
SB2021122104
SB2021122105
and 4 more
#VU56488 - Exposure of sensitive information to an unauthorized actor
CVE-2021-40823
CWE-200 Medium
No
No
12.4.1 14.09.2021 SB2021091407
SB2021091408
SB2021091409