Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 14
Reset filtersmatrix-js-sdk has insufficient MXC URI validation which allows client-side path traversal
Malicious homeservers can steal message keys when the matrix-react-sdk user invites another user to a room
Matrix JavaScript SDK's key history sharing could share keys to malicious devices
matrix-js-sdk will freeze when a user sets a room with itself as a its predecessor
matrix-js-sdk vulnerable to invisible eavesdropping in group calls
Prototype pollution in matrix-js-sdk (part 2)
Prototype pollution in matrix-react-sdk
matrix-js-sdk Prototype Pollution vulnerability
matrix-js-sdk subject to user impersonation due to key/device identifier confusion in SAS verification
matrix-js-sdk subject to user spoofing via Olm/Megolm protocol confusion
matrix-js-sdk subject to impersonated messages due to permissive key forwarding
Improper beacon events in matrix-js-sdk can result in availability issues
matrix-js-sdk can be tricked into disclosing E2EE room keys to a participating homeserver
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.