matrix-react-sdk Prototype pollution vulnerability
Modified: 11/8/2023
package
pkg:npm/matrix-react-sdk
matrix-react-sdk Prototype pollution vulnerability
Modified: 11/8/2023
User content sandbox can be confused into opening arbitrary documents
Modified: 7/8/2026
Prototype pollution in matrix-react-sdk
Modified: 9/10/2026
File upload local preview can run embedded scripts after user interaction
Modified: 7/8/2026
matrix-react-sdk vulnerable to XSS in Export Chat feature
Modified: 11/8/2023
Improper file handling in matrix-react-sdk
Modified: 7/8/2026
Matrix SDK for React's URL preview setting for a room is controllable by the homeserver
Modified: 8/8/2024
Malicious homeservers can steal message keys when the matrix-react-sdk user invites another user to a room
Modified: 10/15/2024
HTML injection in search results via plaintext message highlighting
Modified: 11/8/2023