https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 20:34:21 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-27994 EUVD-2026-27994 https://cve.radiocsirt.org/vuln/euvd-2026-27994 https://cve.radiocsirt.org/vuln/fkie_cve-2021-32622 <p>Matrix-React-SDK is a react-based SDK for inserting a Matrix chat/voip client into a web page. Before version 3.21.0, when uploading a file, the local file preview can lead to execution of scripts embedded in the uploaded file. This can only occur after several user interactions to open the preview in a separate tab. This only impacts the local user while in the process of uploading. It cannot be exploited remotely or by other users. This vulnerability is patched in version 3.21.0.</p> <p>Matrix-React-SDK is a react-based SDK for inserting a Matrix chat/voip client into a web page. Before version 3.21.0, when uploading a file, the local file preview can lead to execution of scripts embedded in the uploaded file. This can only occur after several user interactions to open the preview in a separate tab. This only impacts the local user while in the process of uploading. It cannot be exploited remotely or by other users. This vulnerability is patched in version 3.21.0.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-32622 https://cve.radiocsirt.org/vuln/ghsa-8796-gc9j-63rv <p><strong>Affected:</strong> npm: matrix-react-sdk</p> <p>### Impact</p> <p>When uploading a file, the local file preview can lead to execution of scripts embedded in the uploaded file, but only after several user interactions to open the preview in a separate tab. This only impacts the local user while in the process of uploading. It cannot be exploited remotely or by other users.</p> <p>### Patches</p> <p>This has been fixed by https://github.com/matrix-org/matrix-react-sdk/pull/5981, which is included in 3.21.0.</p> <p>### Workarounds</p> <p>There are no known workarounds.</p> <p><strong>Affected:</strong> npm: matrix-react-sdk</p> <p>### Impact</p> <p>When uploading a file, the local file preview can lead to execution of scripts embedded in the uploaded file, but only after several user interactions to open the preview in a separate tab. This only impacts the local user while in the process of uploading. It cannot be exploited remotely or by other users.</p> <p>### Patches</p> <p>This has been fixed by https://github.com/matrix-org/matrix-react-sdk/pull/5981, which is included in 3.21.0.</p> <p>### Workarounds</p> <p>There are no known workarounds.</p> https://cve.radiocsirt.org/vuln/ghsa-8796-gc9j-63rv https://cve.radiocsirt.org/vuln/gsd-2021-32622 gsd-2021-32622 https://cve.radiocsirt.org/vuln/gsd-2021-32622