.nav-burger { display: none !important; } @media (max-width: 1180px) { /* Match Tailwind's base layer: its important [hidden] reset otherwise wins. */ @layer base { .nav-overlay[hidden] { display: flex !important; } } .nav-overlay[hidden] { position: static; padding: 2rem 1rem; } }

matrix-js-sdk 19.4.0 vulnerabilities

12 advisories known · matrix-js-sdk@19.4.0 · 10 affect this release · Dependencies not checked

SEVERITYADVISORYPUBLISHED

Affects 19.4.0

SEVERITYADVISORYPUBLISHED

Highmatrix-js-sdk subject to user impersonation due to key/device identifier confusion in SAS verificationGHSA-5w8r-8pgj-5jmfCVE-2022-39250Affected <19.7.0Fixed in 19.7.0OSV source ↗4 years ago

Highmatrix-js-sdk subject to user spoofing via Olm/Megolm protocol confusionGHSA-r48r-j8fx-mq2cCVE-2022-39251Affected <19.7.0Fixed in 19.7.0OSV source ↗4 years ago

HighPrototype pollution in matrix-js-sdk (part 2)GHSA-mwq8-fjpf-c2grCVE-2023-28427Affected <24.0.0Fixed in 24.0.0OSV source ↗4 years ago

HighMatrix JavaScript SDK's key history sharing could share keys to malicious devicesGHSA-4jf8-g8wp-cx7cCVE-2024-47080Affected >=9.11.0 <34.8.0Fixed in 34.8.0OSV source ↗2 years ago

Highmatrix-js-sdk subject to impersonated messages due to permissive key forwardingGHSA-6263-x97c-c4ggCVE-2022-39249Affected <19.7.0Fixed in 19.7.0OSV source ↗4 years ago

Mediummatrix-js-sdk has insufficient validation when considering a room to be upgraded by anotherGHSA-mp7c-m3rh-r56vCVE-2025-59160Affected <38.2.0Fixed in 38.2.0OSV source ↗last year

Mediummatrix-js-sdk has insufficient MXC URI validation which allows client-side path traversalGHSA-xvg8-m4x3-w6xrCVE-2024-50336Affected <34.11.1Fixed in 34.11.1OSV source ↗2 years ago

Mediummatrix-js-sdk vulnerable to invisible eavesdropping in group callsGHSA-6g67-q39g-r79qCVE-2023-29529Affected <24.1.0Fixed in 24.1.0OSV source ↗4 years ago

MediumImproper beacon events in matrix-js-sdk can result in availability issuesGHSA-hvv8-5v86-r45xCVE-2022-39236Affected >=17.1.0-rc.1 <19.7.0Fixed in 19.7.0OSV source ↗4 years ago

Mediummatrix-js-sdk will freeze when a user sets a room with itself as a its predecessorGHSA-vhr5-g3pm-49fmCVE-2024-42369Affected <34.3.1Fixed in 34.3.1OSV source ↗2 years ago

Does not affect 19.4.0

SEVERITYADVISORYPUBLISHED

Highmatrix-js-sdk Prototype Pollution vulnerabilityGHSA-rfv9-x7hh-xc32CVE-2022-36059Affected <19.4.0Fixed in 19.4.0OSV source ↗4 years ago

Mediummatrix-js-sdk can be tricked into disclosing E2EE room keys to a participating homeserverGHSA-23cm-x6j7-6hq3CVE-2021-40823Affected <12.4.1Fixed in 12.4.1OSV source ↗5 years ago