Skip to content
OpenAdvisories

Package · Alpine

element-web

12 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 5.4
    CVE-2023-30609

    matrix-react-sdk vulnerable to HTML injection in search results via plaintext message highlighting

    matrix-react-sdk is a react-based SDK for inserting a Matrix chat/VoIP client into a web page. Prior to version 3.71.0, plain text messages containing HTML tags are rendered as HTML in the search results. To exploit this, an attacker needs to trick a user int…

    matrix-org matrix-react-sdk riot-web element-web Alpine npm
  • Medium 4.3
    CVE-2022-39236

    Matrix Javascript SDK improper beacon events can cause availability issues

    Matrix Javascript SDK is the Matrix Client-Server SDK for JavaScript. Starting with version 17.1.0-rc.1, improperly formed beacon events can disrupt or impede the matrix-js-sdk from functioning properly, potentially impacting the consumer's ability to process…

    matrix-org matrix-js-sdk thunderbird node-matrix-js-sdk Debian Ubuntu Alpine npm
  • Medium 5.9
    CVE-2021-40824

    Logic error in Matrix SDK for Android

    A logic error in the room key sharing functionality of Element Android before 1.2.2 and matrix-android-sdk2 (aka Matrix SDK for Android) before 1.2.2 allows a malicious Matrix homeserver present in an encrypted room to steal room encryption keys (via crafted …

    riot-web element-web org.matrix.android:matrix-android-sdk2 Alpine Maven
  • Medium 5.9
    CVE-2021-40823

    matrix-js-sdk can be tricked into disclosing E2EE room keys to a participating homeserver

    A logic error in the room key sharing functionality of matrix-js-sdk (aka Matrix Javascript SDK) before 12.4.1 allows a malicious Matrix homeserver present in an encrypted room to steal room encryption keys (via crafted Matrix protocol messages) that were ori…

    node-matrix-js-sdk riot-web matrix-js-sdk element-web Debian Ubuntu Alpine npm