CVE-2023-28427

CVE-2023-28427 affects matrix-js-sdk (Node/JS Matrix client) prior to 24.0.0. Root cause cited as prototype pollution; impact described as disruption or corruption of runtime data, potentially affecting data processing. Patch is to upgrade to matrix-js-sdk 24.0.0; no public workarounds documented...

CVE-2022-36059

CVE-2022-36059 affects the matrix-js-sdk (Matrix JavaScript client) in versions before 19.4.0, where events containing special strings in key places can temporarily disrupt the SDK’s operation and may corrupt runtime data presented to the consumer. The issue is fixed in matrix-js-sdk 19.4.0; upgr...

CVE-2023-29529

Summary: CVE-2023-29529 affects matrix-js-sdk (Matrix Client-Server SDK for JavaScript/TypeScript) and describes a group-call eavesdropping vulnerability. The issue arises because the group call implementation accepts incoming direct calls from other users during an MSC3401 group call, even if th...