matrix-org matrix-react-sdk

• CVE-2024-47824 High 8.7 Malicious homeservers can steal message keys when the matrix-react-sdk user invites another user to a room 0.7%
• CVE-2024-42347 High 7.7 URL preview setting for a room is controllable by the homeserver in matrix-react-sdk 0.4%
• CVE-2023-37259 Medium 6.1 Cross site scripting in Export Chat feature 0.5%
• CVE-2023-30609 Medium 5.4 matrix-react-sdk vulnerable to HTML injection in search results via plaintext message highlighting 0.6%
• CVE-2022-36060 High 8.2 Prototype pollution in matrix-react-sdk 0.9%
• CVE-2023-28103 High 8.2 Prototype pollution in matrix-react-sdk 0.7%
• CVE-2021-32622 Medium 4.2 File upload local preview can run embedded scripts after user interaction 0.4%
• CVE-2021-21320 Low 2.6 User content sandbox can be confused into opening arbitrary documents 0.9%