Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 59
Reset filtersmatrix-js-sdk subject to impersonated messages due to permissive key forwarding
Improper beacon events in matrix-js-sdk can result in availability issues
matrix-appservice-irc vulnerable to IRC mode parameter confusion
Parsing issue in matrix-org/node-irc leading to room takeovers
Improper handling of multiline messages in node-irc affects matrix-appservice-irc
Improper handling of multiline messages in node-irc
matrix-js-sdk can be tricked into disclosing E2EE room keys to a participating homeserver
Automatic room upgrade handling can be used maliciously to bridge a room non-consentually
Improper file handling in matrix-react-sdk
User content sandbox can be confused into opening arbitrary documents
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.