https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T15:17:46.553481+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2024-avi-1073 certfr-2024-avi-1073 — Une vulnérabilité a été découverte dans les produits Mozilla. Elle permet à un attaquant de provoquer un contournement… 2026-10-04T15:17:46.570628+00:00 certfr-2024-avi-1073 https://cve.radiocsirt.org/vuln/euvd-2026-258694 EUVD-2026-258694 2026-10-04T15:17:46.570670+00:00 EUVD-2026-258694 https://cve.radiocsirt.org/vuln/fkie_cve-2024-50336 fkie_cve-2024-50336 2026-10-04T15:17:46.570685+00:00

matrix-js-sdk is a Matrix messaging protocol Client-Server SDK for JavaScript. matrix-js-sdk before 34.11.0 is vulnerable to client-side path traversal via crafted MXC URIs. A malicious room member can trigger clients based on the matrix-js-sdk to issue arbitrary authenticated GET requests to the client's homeserver. Fixed in matrix-js-sdk 34.11.1.

 https://cve.radiocsirt.org/vuln/ghsa-xvg8-m4x3-w6xr GHSA-xvg8-m4x3-w6xr — matrix-js-sdk has insufficient MXC URI validation which allows client-side path traversal 2026-10-04T15:17:46.570716+00:00

Affected: npm: matrix-js-sdk

### Summary

matrix-js-sdk before 34.11.0 is vulnerable to client-side path traversal via crafted MXC URIs. A malicious room member can trigger clients based on the matrix-js-sdk to issue arbitrary authenticated GET requests to the client's homeserver.

### Details

The Matrix specification demands homeservers to [perform validation](https://spec.matrix.org/v1.12/client-server-api/#security-considerations-5) of the `server-name` and `media-id` components of MXC URIs with the intent to prevent path traversal. However, it is not mentioned that a similar check must also be performed on the client to prevent *client-side* path traversal. matrix-js-sdk fails to perform this validation.

### Patches

Fixed in matrix-js-sdk 34.11.1.

### Workarounds

None.

### References

- https://spec.matrix.org/v1.12/client-server-api/#security-considerations-5 - https://blog.doyensec.com/2024/07/02/cspt2csrf.html

 https://cve.radiocsirt.org/vuln/ncsc-2025-0016 NCSC-2025-0016 — Kwetsbaarheden verholpen in Mozilla Firefox en Thunderbird 2026-10-04T15:17:46.570751+00:00 NCSC-2025-0016 https://cve.radiocsirt.org/vuln/oesa-2025-1835 OESA-2025-1835 — thunderbird security update 2026-10-04T15:17:46.570777+00:00

Affected: openEuler:24.03-LTS-SP2: thunderbird

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fix(es):

A permission leak could have occurred from a trusted site to an untrusted site via `embed` or `object` elements. This vulnerability affects Firefox < 132, Firefox ESR < 128.4, Firefox ESR < 115.17, Thunderbird < 128.4, and Thunderbird < 132.(CVE-2024-10458)

An attacker could have caused a use-after-free when accessibility was enabled, leading to a potentially exploitable crash. This vulnerability affects Firefox < 132, Firefox ESR < 128.4, Firefox ESR < 115.17, Thunderbird < 128.4, and Thunderbird < 132.(CVE-2024-10459)

The origin of an external protocol handler prompt could have been obscured using a data: URL within an `iframe`. This vulnerability affects Firefox < 132, Firefox ESR < 128.4, Thunderbird < 128.4, and Thunderbird < 132.(CVE-2024-10460)

In multipart/x-mixed-replace responses, `Content-Disposition: attachment` in the response header was not respected and did not force a download, which could allow XSS attacks. This vulnerability affects Firefox < 132, Firefox ESR < 128.4, Thunderbird < 128.4, and Thunderbird < 132.(CVE-2024-10461)

Truncation of a long URL could have allowed origin spoofing in a permission prompt. This vulnerability affects Firefox < 132, Firefox ESR < 128.4, Thunderbird < 128.4, and Thunderbird < 132.(CVE-2024-10462)

Video frames could have been leaked between origins in some situations. Thi…

 https://cve.radiocsirt.org/vuln/opensuse-su-2024:14584-1 openSUSE-SU-2024:14584-1 — MozillaThunderbird-128.5.2-1.1 on GA media 2026-10-04T15:17:46.570950+00:00

MozillaThunderbird-128.5.2-1.1 on GA media

 https://cve.radiocsirt.org/vuln/suse-su-2024:4326-1 SUSE-SU-2024:4326-1 — Security update for MozillaThunderbird 2026-10-04T15:17:46.570968+00:00

Security update for MozillaThunderbird

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-50336 UBUNTU-CVE-2024-50336 2026-10-04T15:17:46.570982+00:00

Affected: Ubuntu:18.04:LTS: mozjs52, Ubuntu:18.04:LTS: mozjs38, Ubuntu:20.04:LTS: mozjs68, Ubuntu:20.04:LTS: mozjs52, Ubuntu:20.04:LTS: node-matrix-js-sdk, Ubuntu:22.04:LTS: mozjs102, Ubuntu:22.04:LTS: mozjs78, Ubuntu:22.04:LTS: mozjs91, Ubuntu:22.04:LTS: node-matrix-js-sdk, Ubuntu:22.04:LTS: thunderbird and 3 more

matrix-js-sdk is a Matrix messaging protocol Client-Server SDK for JavaScript. matrix-js-sdk before 34.11.0 is vulnerable to client-side path traversal via crafted MXC URIs. A malicious room member can trigger clients based on the matrix-js-sdk to issue arbitrary authenticated GET requests to the client's homeserver. Fixed in matrix-js-sdk 34.11.1.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3685 WID-SEC-W-2024-3685 — Mozilla Thunderbird: Schwachstelle ermöglicht Path-Traversal Angriff 2026-10-04T15:17:46.571017+00:00

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Mozilla Thunderbird ausnutzen, um einen Path-Traversal Angriff durchzuführen.