Skip to content
OpenAdvisories

Package · Ubuntu

node-matrix-js-sdk

13 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 2.7
    CVE-2025-59160

    matrix-js-sdk has insufficient validation when considering a room to be upgraded by another

    Matrix JavaScript SDK is a Matrix Client-Server SDK for JavaScript and TypeScript. matrix-js-sdk before 38.2.0 has insufficient validation of room predecessor links in MatrixClient::getJoinedRooms, allowing a remote attacker to attempt to replace a tombstoned…

    matrix-org matrix-js-sdk node-matrix-js-sdk matrix-js-sdk Debian Ubuntu npm