How many matrix-org javascript sdk CVEs are in CISA KEV?

None of matrix-org javascript sdk's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of matrix-org javascript sdk are affected?

16 distinct matrix-org javascript sdk versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in matrix-org javascript sdk CVEs?

matrix-org javascript sdk's CVEs most often map to these CWE weakness types: CWE-1321 (Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')), CWE-322 (Key Exchange without Entity Authentication), CWE-20 (Improper Input Validation), CWE-287 (Improper Authentication).

How many critical matrix-org javascript sdk vulnerabilities are there?

matrix-org javascript sdk has 1 critical and 5 high-severity CVEs.

What is the average severity of matrix-org javascript sdk CVEs?

The average CVSS base score across matrix-org javascript sdk's scored CVEs is 7.3.

RadicalNotion.AI

Log in Start free

Log in

Log in Start free

matrix-org

10 CVEs

matrix-org javascript sdk Vulnerabilities

Name: matrix-org javascript sdk vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for javascript sdk by matrix-org.

10

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

0

Public exploits

PoC or exploit code

7.3

Avg CVSS

2021–2024

Last updated August 20, 2024

Overview

matrix-org javascript sdk has 10 published CVE records since 2021, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 0 have a known public exploit. The average CVSS base score across scored CVEs is 7.3.

This page aggregates every publicly disclosed vulnerability (CVE) affecting matrix-org javascript sdk, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of matrix-org javascript sdk's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical1

High5

Medium4

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of matrix-org javascript sdk's CVEs are currently listed in CISA's KEV catalog.

Public exploits

0

No matrix-org javascript sdk CVEs currently have a tracked public exploit.

Affected versions and CVEs

Browse every matrix-org javascript sdk version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

< 19.7.03 CVEs
< 12.4.11 CVE
< 19.4.01 CVE
< 24.0.01 CVE
< 24.1.01 CVE
< 34.3.11 CVE
17.1.0 <= v < 19.7.01 CVE
17.1.0 <= v <= 17.1.01 CVE
2.4.2 <= v < 15.2.11 CVE

Fixed in

19.7.04 CVEs
12.4.11 CVE
15.2.11 CVE
19.4.01 CVE
24.0.01 CVE
24.1.01 CVE
34.3.11 CVE

Find a version

10 CVEs

Sort

Medium vulnerability · 2024-08-20
CVE-2024-42369
Patch
CWE-674
Medium · CVSS 5.1
EPSS 0.5% (37th pct)2024-08-20
matrix-js-sdk vulnerable to invisible eavesdropping in group calls
CVE-2023-29529
Patch
CWE-862
Medium · CVSS 5.3
EPSS 0.5% (42th pct)2023-04-14
Prototype pollution in matrix-js-sdk
CVE-2023-28427
Patch
CWE-1321
High · CVSS 8.2
EPSS 1.2% (65th pct)2023-03-28
Prototype pollution in matrix-js-sdk
CVE-2022-36059
Patch
CWE-1321
High · CVSS 8.2
EPSS 0.9% (57th pct)2023-03-28
Matrix JavaScript SDK vulnerable to key/device identifier confusion in SAS verification
CVE-2022-39250
Patch
CWE-322
High · CVSS 8.6
EPSS 0.9% (57th pct)2022-09-29
High vulnerability · 2022-09-28
CVE-2022-39251
Patch
CWE-322
High · CVSS 8.6
EPSS 0.9% (56th pct)2022-09-28
High vulnerability · 2022-09-28
CVE-2022-39249
Patch
CWE-287
High · CVSS 7.5
EPSS 1.0% (59th pct)2022-09-28
Medium vulnerability · 2022-09-28
CVE-2022-39236
Patch
CWE-20
Medium · CVSS 5.3
EPSS 1.0% (61th pct)2022-09-28
Critical vulnerability · 2021-12-14
CVE-2021-44538
Patch
Critical · CVSS 9.8
EPSS 1.9% (78th pct)2021-12-14
Medium vulnerability · 2021-09-13
CVE-2021-40823
Patch
Medium · CVSS 5.9
EPSS 0.7% (48th pct)2021-09-13

Common weakness types

The CWE weakness categories most often found in matrix-org javascript sdk CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many matrix-org javascript sdk CVEs were published each year.

2021

2

2022

4

2023

3

2024

1

Other matrix-org products

Browse vulnerabilities for other products by matrix-org.

synapse40 CVEs matrix-synapse31 CVEs matrix-js-sdk13 CVEs matrix-appservice-irc10 CVEs matrix-react-sdk8 CVEs matrix-rust-sdk8 CVEs matrix-spec-proposals8 CVEs matrix irc bridge7 CVEs

All matrix-org vulnerabilities

Frequently asked questions

Common questions about matrix-org javascript sdk vulnerabilities.

How many CVEs does matrix-org javascript sdk have?: matrix-org javascript sdk has 10 published CVE records since 2021.
How many matrix-org javascript sdk CVEs are in CISA KEV?: None of matrix-org javascript sdk's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for matrix-org javascript sdk vulnerabilities?: No matrix-org javascript sdk CVEs currently have a tracked public exploit in this dataset.
Which versions of matrix-org javascript sdk are affected?: 16 distinct matrix-org javascript sdk versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in matrix-org javascript sdk CVEs?: matrix-org javascript sdk's CVEs most often map to these CWE weakness types: CWE-1321 (Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')), CWE-322 (Key Exchange without Entity Authentication), CWE-20 (Improper Input Validation), CWE-287 (Improper Authentication).
How many critical matrix-org javascript sdk vulnerabilities are there?: matrix-org javascript sdk has 1 critical and 5 high-severity CVEs.
What is the average severity of matrix-org javascript sdk CVEs?: The average CVSS base score across matrix-org javascript sdk's scored CVEs is 7.3.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track matrix-org javascript sdk vulnerabilities

Monitor new matrix-org javascript sdk vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing