HIGH7.2npm
GHSA-2x9c-qwgf-94xr· CVE-2022-36060matrix-react-sdk Prototype pollution vulnerability
Modified: 11/8/2023
package
npm/matrix-react-sdk
pkg:npm/matrix-react-sdk
LOW2.6npm
GHSA-52mq-6jcv-j79x· CVE-2021-21320User content sandbox can be confused into opening arbitrary documents
Modified: 7/8/2026
HIGH8.2npm
GHSA-6g43-88cp-w5gv· CVE-2023-28103Prototype pollution in matrix-react-sdk
Modified: 9/10/2026
MEDIUM4.2npm
GHSA-8796-gc9j-63rv· CVE-2021-32622, GHSA-cg57-p69r-3m7pFile upload local preview can run embedded scripts after user interaction
Modified: 7/8/2026
MEDIUM6.1npm
GHSA-c9vx-2g7w-rp65· CVE-2023-37259matrix-react-sdk vulnerable to XSS in Export Chat feature
Modified: 11/8/2023
MEDIUM4.2npm
GHSA-cg57-p69r-3m7p· CVE-2021-32622, GHSA-8796-gc9j-63rvImproper file handling in matrix-react-sdk
Modified: 7/8/2026
MEDIUM4.1npm
GHSA-f83w-wqhc-cfp4· CVE-2024-42347Matrix SDK for React's URL preview setting for a room is controllable by the homeserver
Modified: 8/8/2024
—0.0npm
GHSA-qcvh-p9jq-wp8v· CVE-2024-47824Malicious homeservers can steal message keys when the matrix-react-sdk user invites another user to a room
Modified: 10/15/2024
HIGH8.2npm
GHSA-xv83-x443-7rmw· CVE-2023-30609HTML injection in search results via plaintext message highlighting
Modified: 11/8/2023