If you've found a security vulnerability, please report it to security@matrix.org.
For more information on our security disclosure policy, visit https://www.matrix.org/security-disclosure-policy/.
This repository was archived by the owner on Sep 11, 2024. It
8000
is now read-only.
Security: matrix-org/matrix-react-sdk
Security
SECURITY.md
-
URL preview setting for a room is controllable by the homeserverGHSA-f83w-wqhc-cfp4 published < 69CF relative-time datetime="2024-08-06T11:30:40Z" class="no-wrap">Aug 6, 2024 by davidegirardiHigh
-
Potential for XSS in Export Chat featureGHSA-c9vx-2g7w-rp65 published
Jul 18, 2023 by andybalaamModerate -
HTML injection in search results via plaintext message highlightingGHSA-xv83-x443-7rmw published
Apr 25, 2023 by andybalaamHigh -
Prototype pollution in matrix-react-sdk (part 2)GHSA-6g43-88cp-w5gv published
Mar 28, 2023 by dkasakHigh -
Prototype pollution in matrix-react-sdkGHSA-2x9c-qwgf-94xr published
Mar 28, 2023 by dkasakHigh -
Malicious homeservers can steal message keys when the matrix-react-sdk user invites another user to a roomGHSA-qcvh-p9jq-wp8v published
Oct 15, 2024 by dkasakHigh -
File upload local preview can run embedded scripts after user interactionGHSA-8796-gc9j-63rv published
May 17, 2021 by jryansLow -
User content sandbox can be confused into opening arbitrary documents and exposing user dataGHSA-52mq-6jcv-j79x published
Mar 1, 2021 by jryansModerate
Learn more about advisories related to matrix-org/matrix-react-sdk in the GitHub Advisory Database