matrix-react-sdk

on NPM

510 releases

new releases every 6 days 3 hours

last release was last Tuesday at 12:58 PM

last checked today at 7:41 PM

SDK for matrix.org using React

CVE History

CVE	Published	CVSS v2	CVSS v3
CVE-2021-21320	March 2, 2021	4.3 MEDIUM	4.3 MEDIUM
matrix-react-sdk is an npm package which is a Matrix SDK for React Javascript. In matrix-react-sdk before version 3.15.0, the user content sandbox can be abused to trick users into opening unexpected documents. The content is opened with a `blob` origin that cannot access Matrix user data, so messages and secrets are not at risk. This has been fixed in version 3.15.0.