Vulnerabilities

TI-2022-18626 CVE-2022-39250 · GHSA-5w8r-8pgj-5jmf

Matrix JavaScript SDK vulnerable to key/device identifier confusion in SAS verification

MEDIUM 46

Matrix JavaScript SDK is the Matrix Client-Server software development kit (SDK) for JavaScript.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.01186 Published 2022-09-29 Partial fix · 19.7.0 CWE-287

TI-2022-18627 CVE-2022-39251 · GHSA-r48r-j8fx-mq2c

MEDIUM 46

Matrix Javascript SDK is the Matrix Client-Server SDK for JavaScript.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.01176 Published 2022-09-28 Partial fix · 19.7.0 CWE-287

TI-2022-18625 CVE-2022-39249 · GHSA-6263-x97c-c4gg

MEDIUM 41

Matrix Javascript SDK is the Matrix Client-Server SDK for JavaScript.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01276 Published 2022-09-28 Partial fix · 19.7.0 CWE-287

TI-2022-18613 CVE-2022-39236 · GHSA-hvv8-5v86-r45x

LOW 27

Matrix Javascript SDK is the Matrix Client-Server SDK for JavaScript.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01361 Published 2022-09-28 Partial fix · 19.7.0 CWE-20