https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 05:21:45 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-22115 EUVD-2026-22115 https://cve.radiocsirt.org/vuln/euvd-2026-22115 https://cve.radiocsirt.org/vuln/fkie_cve-2021-21320 <p>matrix-react-sdk is an npm package which is a Matrix SDK for React Javascript. In matrix-react-sdk before version 3.15.0, the user content sandbox can be abused to trick users into opening unexpected documents. The content is opened with a `blob` origin that cannot access Matrix user data, so messages and secrets are not at risk. This has been fixed in version 3.15.0.</p> <p>matrix-react-sdk is an npm package which is a Matrix SDK for React Javascript. In matrix-react-sdk before version 3.15.0, the user content sandbox can be abused to trick users into opening unexpected documents. The content is opened with a `blob` origin that cannot access Matrix user data, so messages and secrets are not at risk. This has been fixed in version 3.15.0.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-21320 https://cve.radiocsirt.org/vuln/ghsa-52mq-6jcv-j79x <p><strong>Affected:</strong> npm: matrix-react-sdk</p> <p>### Impact</p> <p>The user content sandbox can be abused to trick users into opening unexpected documents after several user interactions. The content can be opened with a `blob` origin from the Matrix client, so it is possible for a malicious document to access user messages and secrets.</p> <p>### Patches</p> <p>This has been fixed by https://github.com/matrix-org/matrix-react-sdk/pull/5657, which is included in 3.15.0.</p> <p>### Workarounds</p> <p>There are no known workarounds.</p> <p><strong>Affected:</strong> npm: matrix-react-sdk</p> <p>### Impact</p> <p>The user content sandbox can be abused to trick users into opening unexpected documents after several user interactions. The content can be opened with a `blob` origin from the Matrix client, so it is possible for a malicious document to access user messages and secrets.</p> <p>### Patches</p> <p>This has been fixed by https://github.com/matrix-org/matrix-react-sdk/pull/5657, which is included in 3.15.0.</p> <p>### Workarounds</p> <p>There are no known workarounds.</p> https://cve.radiocsirt.org/vuln/ghsa-52mq-6jcv-j79x https://cve.radiocsirt.org/vuln/gsd-2021-21320 gsd-2021-21320 https://cve.radiocsirt.org/vuln/gsd-2021-21320