GHSA-2x9c-qwgf-94xr
matrix-react-sdk Prototype pollution vulnerability
Quick fix
GHSA-2x9c-qwgf-94xr — matrix-react-sdk: upgrade to the fixed version with the command below.
npm install matrix-react-sdk@3.53.0Details
### Impact Events sent with special strings in key places can temporarily disrupt or impede the matrix-react-sdk from functioning properly, such as by causing room or event tile crashes. The remainder of the application can appear functional, though certain rooms/events will not be rendered.
### Patches This is fixed in matrix-react-sdk 3.53.0
### Workarounds There are no workarounds. Please upgrade immediately.
### References https://learn.snyk.io/lessons/prototype-pollution/javascript/
### For more information If you have any questions or comments about this advisory please email us at [security at matrix.org](mailto:security@matrix.org).
Are you affected?
Enter the version of the package you're using.