CVE security advisories and vulnerability history for matrix-js-sdk by npm.
Last updated
npm matrix-js-sdk has 12 published CVE records since 2021, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 0 have a known public exploit. The average CVSS base score across scored CVEs is 6.5.
This page aggregates every publicly disclosed vulnerability (CVE) affecting npm matrix-js-sdk, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.
How the CVSS severity of npm matrix-js-sdk's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.
1 additional CVE has no CVSS severity score.
In CISA’s Known Exploited Vulnerabilities catalog
0
None of npm matrix-js-sdk's CVEs are currently listed in CISA's KEV catalog.
Public exploits
0
No npm matrix-js-sdk CVEs currently have a tracked public exploit.
Browse every npm matrix-js-sdk version named in a CVE, then pick one to see only the CVEs that affect it.
12 CVEs
The CWE weakness categories most often found in npm matrix-js-sdk CVEs. Follow any weakness for its full explanation.
How many npm matrix-js-sdk CVEs were published each year.
Browse vulnerabilities for other products by npm.
Common questions about npm matrix-js-sdk vulnerabilities.
npm matrix-js-sdk has 12 published CVE records since 2021.
None of npm matrix-js-sdk's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
No npm matrix-js-sdk CVEs currently have a tracked public exploit in this dataset.
9 distinct npm matrix-js-sdk versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
npm matrix-js-sdk's CVEs most often map to these CWE weakness types: CWE-1321 (Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')), CWE-287 (Improper Authentication), CWE-322 (Key Exchange without Entity Authentication), CWE-674 (Uncontrolled Recursion).
The average CVSS base score across npm matrix-js-sdk's scored CVEs is 6.5.
Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.
Monitor new npm matrix-js-sdk vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.
