If you've found a security vulnerability, please report it to security@matrix.org
For more information on our security disclosure policy, visit https://www.matrix.org/security-disclosure-policy/
Security: matrix-org/matrix-js-sdk
Security
SECURITY.md
-
Invisible eavesdropping in group callsGHSA-6g67-q39g-r79q published
Apr 13, 2023 by dkasakModerate -
Prototype pollution in matrix-js-sdk (part 2)GHSA-mwq8-fjpf-c2gr published
Mar 28, 2023 by dkasakHigh -
Impersonation via forwarded Megolm sessionsGHSA-6263-x97c-c4gg published
Sep 28, 2022 by dkasakModerate -
Improper beacon events can cause availability issuesGHSA-hvv8-5v86-r45x published
Sep 28, 2022 by turt2liveModerate -
Prototype pollution in matrix-js-sdkGHSA-rfv9-x7hh-xc32 published
Mar 28, 2023 by dkasakHigh -
Olm/Megolm protocol confusionGHSA-r48r-j8fx-mq2c published
Sep 28, 2022 by dkasakCritical -
Key/device identifier confusion in SAS verificationGHSA-5w8r-8pgj-5jmf published
Sep 29, 2022 by dkasakCritical -
matrix-js-sdk can be tricked into disclosing E2EE room keys to a participating homeserverGHSA-23cm-x6j7-6hq3 published
Sep 14, 2021 by dbkrCritical
Learn more about advisories related to matrix-org/matrix-js-sdk in the GitHub Advisory Database