CVE-2022-36059 Prototype pollution in matrix-js-sdk

matrix-js-sdk is a Matrix messaging protocol Client-Server SDK for JavaScript. In versions prior to 19.4.0 events sent with special strings in key places can temporarily disrupt or impede the matrix-js-sdk from functioning properly, potentially impacting the consumer's ability to process data...

CVE-2022-36059

matrix-js-sdk is a Matrix messaging protocol Client-Server SDK for JavaScript. In versions prior to 19.4.0 events sent with special strings in key places can temporarily disrupt or impede the matrix-js-sdk from functioning properly, potentially impacting the consumer's ability to process data...

CVE-2022-36059 Prototype pollution in matrix-js-sdk

matrix-js-sdk is a Matrix messaging protocol Client-Server SDK for JavaScript. In versions prior to 19.4.0 events sent with special strings in key places can temporarily disrupt or impede the matrix-js-sdk from functioning properly, potentially impacting the consumer's ability to process data...

CVE-2022-36059

CVE-2022-36059 affects the matrix-js-sdk (Matrix JavaScript client) in versions before 19.4.0, where events containing special strings in key places can temporarily disrupt the SDK’s operation and may corrupt runtime data presented to the consumer. The issue is fixed in matrix-js-sdk 19.4.0; upgr...

CVE-2022-36059 Prototype pollution in matrix-js-sdk

matrix-js-sdk is a Matrix messaging protocol Client-Server SDK for JavaScript. In versions prior to 19.4.0 events sent with special strings in key places can temporarily disrupt or impede the matrix-js-sdk from functioning properly, potentially impacting the consumer's ability to process data...

CVE-2022-36059

matrix-js-sdk is a Matrix messaging protocol Client-Server SDK for JavaScript. In versions prior to 19.4.0 events sent with special strings in key places can temporarily disrupt or impede the matrix-js-sdk from functioning properly, potentially impacting the consumer's ability to process data...

GHSA-RFV9-X7HH-XC32 matrix-js-sdk Prototype Pollution vulnerability

Impact Events sent with special strings in key places can temporarily disrupt or impede the matrix-js-sdk from functioning properly, potentially impacting the consumer's ability to process data safely. Note that the matrix-js-sdk can appear to be operating normally but be excluding or corrupting...

matrix-react-sdk (>=3.48.0-rc.1, <=3.52.0) potentially affected by CVE-2022-36059 via matrix-js-sdk (>=19.0.0, <=19.3.0-rc.2)

matrix-js-sdk NPM version =19.0.0, =3.48.0-rc.1, =3.52.0 Source cves: CVE-2022-36059 Source advisory: OSV:GHSA-RFV9-X7HH-XC32...

matrix-js-sdk 安全漏洞

matrix-js-sdk is an application component of matrix open source. A security vulnerability exists in matrix-js-sdk versions prior to 24.0.0, which stems from an event sent using a special string that may temporarily interrupt or prevent the normal operation of a program...

Amazon Linux 2 : thunderbird (ALAS-2022-1900)

The version of thunderbird installed on the remote host is prior to 102.4.0-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2022-1900 advisory. 2024-05-09: CVE-2021-28429 was added to this advisory. Integer overflow vulnerability in avtimecodemakestring in...

Oracle Linux 9 : thunderbird (ELSA-2022-7178)

The remote Oracle Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2022-7178 advisory. 102.4.0-1 - Update to 102.4.0 build1 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...

Oracle Linux 7 : thunderbird (ELSA-2022-7184)

The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2022-7184 advisory. - Fix for expat CVE-2022-40674 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus...

matrix-react-sdk (>=3.48.0-rc.1, <=3.55.0) potentially affected by CVE-2022-39250 via matrix-js-sdk (>=19.0.0, <=19.6.0-rc.1)

matrix-js-sdk NPM version =19.0.0, =3.48.0-rc.1, =3.55.0 Source cves: CVE-2022-39250 Source advisory: OSV:GHSA-5W8R-8PGJ-5JMF...

Authentication Bypass

matrix-js-sdk is vulnerable to authentication bypass. A malicious server admin is able to break emoji-based verification when cross-signing is in use, authenticating themselves instead of the target user being verified. The vulnerability is possible because the library confuses device IDs and...

matrix-react-sdk (>=3.48.0-rc.1, <=3.55.0) potentially affected by CVE-2022-39251 via matrix-js-sdk (>=19.0.0, <=19.6.0-rc.1)

matrix-js-sdk NPM version =19.0.0, =3.48.0-rc.1, =3.55.0 Source cves: CVE-2022-39251 Source advisory: OSV:GHSA-R48R-J8FX-MQ2C...

matrix-react-sdk (>=3.48.0-rc.1, <=3.55.0) potentially affected by CVE-2022-39249 via matrix-js-sdk (>=19.0.0, <=19.6.0-rc.1)

matrix-js-sdk NPM version =19.0.0, =3.48.0-rc.1, =3.55.0 Source cves: CVE-2022-39249 Source advisory: OSV:GHSA-6263-X97C-C4GG...

@syncpoint/odrix (>=1.2.0, <=1.3.4), matrix-react-sdk (>=3.48.0-rc.1, <=3.55.0) +1 more potentially affected by CVE-2022-39236 via matrix-js-sdk (>=17.2.0, <=19.6.0-rc.1)

matrix-js-sdk NPM version =17.2.0, =1.2.0, =3.48.0-rc.1, =2.2.0, =3.1.0 Source cves: CVE-2022-39236 Source advisory: OSV:GHSA-HVV8-5V86-R45X...

GHSA-HVV8-5V86-R45X Improper beacon events in matrix-js-sdk can result in availability issues

Impact Improperly formed beacon events from MSC3488 can disrupt or impede the matrix-js-sdk from functioning properly, potentially impacting the consumer's ability to process data safely. Note that the matrix-js-sdk can appear to be operating normally but be excluding or corrupting runtime data...

Improper beacon events in matrix-js-sdk can result in availability issues

Impact Improperly formed beacon events from MSC3488 can disrupt or impede the matrix-js-sdk from functioning properly, potentially impacting the consumer's ability to process data safely. Note that the matrix-js-sdk can appear to be operating normally but be excluding or corrupting runtime data...

Denial Of Service (DoS)

matrix-js-sdk is vulnerable to denial of service attacks. The vulnerability exists in the senderKey parameter inmegolm.js due to improperly formed beacon events which allows an attacker to craft a malicious event and crash the system...