Skip to content
OpenAdvisories

Package · Alpine

element-web

12 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • High 8.2
    CVE-2022-36060

    Prototype pollution in matrix-react-sdk

    matrix-react-sdk is a Matrix chat protocol SDK for React Javascript. Events sent with special strings in key places can temporarily disrupt or impede the matrix-react-sdk from functioning properly, such as by causing room or event tile crashes. The remainder …

    matrix-org matrix-react-sdk riot-web element-web Alpine npm
  • High 8.2
    CVE-2023-28103

    Prototype pollution in matrix-react-sdk

    matrix-react-sdk is a Matrix chat protocol SDK for React Javascript. In certain configurations, data sent by remote servers containing special strings in key locations could cause modifications of the `Object.prototype`, disrupting matrix-react-sdk functional…

    matrix-org matrix-react-sdk element-web riot-web Alpine npm
  • High 8.2
    CVE-2023-28427

    Prototype pollution in matrix-js-sdk

    matrix-js-sdk is a Matrix messaging protocol Client-Server SDK for JavaScript. In versions prior to 24.0.0 events sent with special strings in key places can temporarily disrupt or impede the matrix-js-sdk from functioning properly, potentially impacting the …

    matrix-org matrix-js-sdk thunderbird node-matrix-js-sdk Debian Ubuntu Alpine npm
  • High 8.2
    CVE-2022-36059

    Prototype pollution in matrix-js-sdk

    matrix-js-sdk is a Matrix messaging protocol Client-Server SDK for JavaScript. In versions prior to 19.4.0 events sent with special strings in key places can temporarily disrupt or impede the matrix-js-sdk from functioning properly, potentially impacting the …

    matrix-org matrix-js-sdk thunderbird thunderbird Debian Ubuntu Alpine npm
  • High 8.6
    CVE-2022-39250

    Matrix JavaScript SDK vulnerable to key/device identifier confusion in SAS verification

    Matrix JavaScript SDK is the Matrix Client-Server software development kit (SDK) for JavaScript. Prior to version 19.7.0, an attacker cooperating with a malicious homeserver could interfere with the verification flow between two users, injecting its own cross…

    matrix-org matrix-js-sdk thunderbird node-matrix-js-sdk Debian Ubuntu Alpine npm
  • High 8.6
    CVE-2022-39251

    Matrix Javascript SDK vulnerable to Olm/Megolm protocol confusion

    Matrix Javascript SDK is the Matrix Client-Server SDK for JavaScript. Prior to version 19.7.0, an attacker cooperating with a malicious homeserver can construct messages that legitimately appear to have come from another person, without any indication such as…

    matrix-org matrix-js-sdk thunderbird node-matrix-js-sdk Debian Ubuntu Alpine npm
  • High 7.5
    CVE-2022-39249

    Matrix Javascript SDK vulnerable to impersonation via forwarded Megolm sessions

    Matrix Javascript SDK is the Matrix Client-Server SDK for JavaScript. Prior to version 19.7.0, an attacker cooperating with a malicious homeserver can construct messages appearing to have come from another person. Such messages will be marked with a grey shie…

    matrix-org matrix-js-sdk thunderbird node-matrix-js-sdk Debian Ubuntu Alpine npm