matrix-react-sdk

Every one of the 8 is a mark on the map. Named now: 1 to 8, most at risk first.

1. User content sandbox can be confused into opening arbitrary documentsCVE-2021-21320matrix-org · CVSS 2.6 · 0.9% likely

   CWE-345

2. Prototype pollution in matrix-react-sdkCVE-2022-36060matrix-org · CVSS 8.2 · 0.9% likely

   CWE-1321

3. Prototype pollution in matrix-react-sdkCVE-2023-28103matrix-org · CVSS 8.2 · 0.7% likely

   CWE-1321

4. Malicious homeservers can steal message keys when the matrix-react-sdk user invites another user to a roomCVE-2024-47824matrix-org · CVSS 8.7 · 0.7% likely

   CWE-200

5. matrix-react-sdk vulnerable to HTML injection in search results via plaintext message highlightingCVE-2023-30609matrix-org · CVSS 5.4 · 0.6% likely

   CWE-74

6. Cross site scripting in Export Chat featureCVE-2023-37259matrix-org · CVSS 6.1 · 0.5% likely

   CWE-79

7. URL preview setting for a room is controllable by the homeserver in matrix-react-sdkCVE-2024-42347matrix-org · CVSS 7.7 · 0.4% likely

   CWE-359

8. File upload local preview can run embedded scripts after user interactionCVE-2021-32622matrix-org · CVSS 4.2 · 0.4% likely

   CWE-74

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.