CVE-2023-28427 Prototype pollution in matrix-js-sdk

matrix-js-sdk is a Matrix messaging protocol Client-Server SDK for JavaScript. In versions prior to 24.0.0 events sent with special strings in key places can temporarily disrupt or impede the matrix-js-sdk from functioning properly, potentially impacting the consumer's ability to process data...

CVE-2023-28427

CVE-2023-28427 affects matrix-js-sdk (Node/JS Matrix client) prior to 24.0.0. Root cause cited as prototype pollution; impact described as disruption or corruption of runtime data, potentially affecting data processing. Patch is to upgrade to matrix-js-sdk 24.0.0; no public workarounds documented...

CVE-2023-28427 Prototype pollution in matrix-js-sdk

matrix-js-sdk is a Matrix messaging protocol Client-Server SDK for JavaScript. In versions prior to 24.0.0 events sent with special strings in key places can temporarily disrupt or impede the matrix-js-sdk from functioning properly, potentially impacting the consumer's ability to process data...

CVE-2023-28427

matrix-js-sdk is a Matrix messaging protocol Client-Server SDK for JavaScript. In versions prior to 24.0.0 events sent with special strings in key places can temporarily disrupt or impede the matrix-js-sdk from functioning properly, potentially impacting the consumer's ability to process data...

CVE-2022-36059

matrix-js-sdk is a Matrix messaging protocol Client-Server SDK for JavaScript. In versions prior to 19.4.0 events sent with special strings in key places can temporarily disrupt or impede the matrix-js-sdk from functioning properly, potentially impacting the consumer's ability to process data...

@airgap/beacon-sdk (>=0.0.1-beta.0, <=0.3.0), @caelum-tech/lorena-matrix-client (>=1.3.0, <=2.1.2) +53 more potentially affected by CVE-2022-36059 via matrix-js-sdk (>=0.0.4, <=19.4.0-rc.1)

matrix-js-sdk NPM version =0.0.4, =0.0.1-beta.0, =1.3.0, =1.0.0, =2.5.0, =0.0.1, =0.0.14, =0.0.1, =2.10.1, =4.0.1, =1.2.0, =6.3.0-wallet.0, =0.1.14, =0.1.18, =0.2.4 and more Source cves: CVE-2022-36059 Source advisory: MEND:CVE-2022-36059...

CVE-2022-36059 Prototype pollution in matrix-js-sdk

matrix-js-sdk is a Matrix messaging protocol Client-Server SDK for JavaScript. In versions prior to 19.4.0 events sent with special strings in key places can temporarily disrupt or impede the matrix-js-sdk from functioning properly, potentially impacting the consumer's ability to process data...

CVE-2022-36059

matrix-js-sdk is a Matrix messaging protocol Client-Server SDK for JavaScript. In versions prior to 19.4.0 events sent with special strings in key places can temporarily disrupt or impede the matrix-js-sdk from functioning properly, potentially impacting the consumer's ability to process data...

CVE-2022-36059 Prototype pollution in matrix-js-sdk

matrix-js-sdk is a Matrix messaging protocol Client-Server SDK for JavaScript. In versions prior to 19.4.0 events sent with special strings in key places can temporarily disrupt or impede the matrix-js-sdk from functioning properly, potentially impacting the consumer's ability to process data...

CVE-2022-36059 Prototype pollution in matrix-js-sdk

matrix-js-sdk is a Matrix messaging protocol Client-Server SDK for JavaScript. In versions prior to 19.4.0 events sent with special strings in key places can temporarily disrupt or impede the matrix-js-sdk from functioning properly, potentially impacting the consumer's ability to process data...

CVE-2022-36059

CVE-2022-36059 affects the matrix-js-sdk (Matrix JavaScript client) in versions before 19.4.0, where events containing special strings in key places can temporarily disrupt the SDK’s operation and may corrupt runtime data presented to the consumer. The issue is fixed in matrix-js-sdk 19.4.0; upgr...

CVE-2022-36059

matrix-js-sdk is a Matrix messaging protocol Client-Server SDK for JavaScript. In versions prior to 19.4.0 events sent with special strings in key places can temporarily disrupt or impede the matrix-js-sdk from functioning properly, potentially impacting the consumer's ability to process data...

matrix-react-sdk (>=3.48.0-rc.1, <=3.53.0-rc.2) potentially affected by CVE-2022-36059 via matrix-js-sdk (>=19.0.0-rc.1, <=19.4.0-rc.1)

matrix-js-sdk NPM version =19.0.0-rc.1, =3.48.0-rc.1, =3.53.0-rc.2 Source cves: CVE-2022-36059 Source advisory: OSV:GHSA-RFV9-X7HH-XC32...

GHSA-RFV9-X7HH-XC32 matrix-js-sdk Prototype Pollution vulnerability

Impact Events sent with special strings in key places can temporarily disrupt or impede the matrix-js-sdk from functioning properly, potentially impacting the consumer's ability to process data safely. Note that the matrix-js-sdk can appear to be operating normally but be excluding or corrupting...

matrix-react-sdk (>=3.48.0-rc.1, <=3.53.0-rc.2) potentially affected by CVE-2022-36059 via matrix-js-sdk (>=19.0.0-rc.1, <=19.4.0-rc.1)

matrix-js-sdk NPM version =19.0.0-rc.1, =3.48.0-rc.1, =3.53.0-rc.2 Source cves: CVE-2022-36059 Source advisory: GHSA-RFV9-X7HH-XC32...

PT-2023-2100

Name of the Vulnerable Software and Affected Versions matrix-js-sdk versions prior to 24.0.0 Description The issue is related to events sent with special strings in key places, which can temporarily disrupt or impede the matrix-js-sdk from functioning properly, potentially impacting the consumer'...

CVE-2022-36059: Improperly Controlled Modification of Object Prototype Attributes

matrix-js-sdk is a Matrix messaging protocol Client-Server SDK for JavaScript. In versions prior to 19.4.0 events sent with special strings in key places can temporarily disrupt or impede the matrix-js-sdk from functioning properly, potentially impacting the consumer's ability to process data...

CVE-2023-28427: Improperly Controlled Modification of Object Prototype Attributes

matrix-js-sdk is a Matrix messaging protocol Client-Server SDK for JavaScript. In versions prior to 24.0.0 events sent with special strings in key places can temporarily disrupt or impede the matrix-js-sdk from functioning properly, potentially impacting the consumer's ability to process data...

matrix-js-sdk security vulnerabilities

matrix-js-sdk is an application component of matrix open source. A security vulnerability exists in matrix-js-sdk versions prior to 24.0.0, which stems from an event sent using a special string that may temporarily interrupt or prevent the normal operation of a program...

Amazon Linux 2 : thunderbird (ALAS-2022-1900)

The version of thunderbird installed on the remote host is prior to 102.4.0-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2022-1900 advisory. 2024-05-09: CVE-2021-28429 was added to this advisory. Integer overflow vulnerability in avtimecodemakestring in...