Most recent entries from all

CLEANSTART-2024-KG85356 — matrix-react-sdk is a Matrix chat protocol SDK for React Javascript

2026-10-05T23:00:42.062245+00:00

Affected: CleanStart: element-web

Security vulnerability affects the element-web package. matrix-react-sdk is a Matrix chat protocol SDK for React Javascript.

EUVD-2026-218129

2026-10-05T23:00:42.062305+00:00

EUVD-2026-218129

fkie_cve-2022-36060

2026-10-05T23:00:42.062321+00:00

matrix-react-sdk is a Matrix chat protocol SDK for React Javascript. Events sent with special strings in key places can temporarily disrupt or impede the matrix-react-sdk from functioning properly, such as by causing room or event tile crashes. The remainder of the application can appear functional, though certain rooms/events will not be rendered. This issue has been fixed in matrix-react-sdk 3.53.0 and users are advised to upgrade. There are no known workarounds for this vulnerability.

GHSA-2x9c-qwgf-94xr — matrix-react-sdk Prototype pollution vulnerability

2026-10-05T23:00:42.062350+00:00

Affected: npm: matrix-react-sdk

### Impact Events sent with special strings in key places can temporarily disrupt or impede the matrix-react-sdk from functioning properly, such as by causing room or event tile crashes. The remainder of the application can appear functional, though certain rooms/events will not be rendered.

### Patches This is fixed in matrix-react-sdk 3.53.0

### Workarounds There are no workarounds. Please upgrade immediately.

### References https://learn.snyk.io/lessons/prototype-pollution/javascript/

### For more information If you have any questions or comments about this advisory please email us at [security at matrix.org](mailto:security@matrix.org).

gsd-2022-36060

2026-10-05T23:00:42.062379+00:00

gsd-2022-36060