If you've found a security vulnerability, please report it to security@matrix.org.
For more information on our security disclosure policy, visit https://www.matrix.org/security-disclosure-policy/.
This repository has been archived by the owner on Sep 11, 2024. It is now read-only.
Security: matrix-org/matrix-react-sdk
Security
SECURITY.md
-
URL preview setting for a room is controllable by the homeserverGHSA-f83w-wqhc-cfp4 published
Aug 6, 2024 by davidegirardiHigh -
Potential for XSS in Export Chat featureGHSA-c9vx-2g7w-rp65 published
Jul 18, 2023 by andybalaamModerate -
HTML injection in search results via plaintext message highlightingGHSA-xv83-x443-7rmw published
Apr 25, 2023 by andybalaamHigh -
Prototype pollution in matrix-react-sdk (part 2)GHSA-6g43-88cp-w5gv published
Mar 28, 2023 by dkasakHigh -
Prototype pollution in matrix-react-sdkGHSA-2x9c-qwgf-94xr published
Mar 28, 2023 by dkasakHigh -
File upload local preview can run embedded scripts after user interactionGHSA-8796-gc9j-63rv published
May 17, 2021 by jryansLow -
User content sandbox can be confused into opening arbitrary documents and exposing user dataGHSA-52mq-6jcv-j79x published
Mar 1, 2021 by jryansModerate
Learn more about advisories related to matrix-org/matrix-react-sdk in the GitHub Advisory Database