npm/matrix-react-sdk CVE-2022-36060: high 7.2

matrix-react-sdk Prototype pollution vulnerability

Action: Upgrade matrix-react-sdk to 3.53.0 or later.

npm i matrix-react-sdk@3.53.0

Affected

Fixed versions

Sources

• osv: GHSA-2x9c-qwgf-94xr
• https://github.com/matrix-org/matrix-react-sdk/security/advisories/GHSA-2x9c-qwgf-94xr
• https://nvd.nist.gov/vuln/detail/CVE-2022-36060
• https://github.com/matrix-org/matrix-react-sdk
• https://github.com/matrix-org/matrix-react-sdk/releases/tag/v3.53.0

CVE-2022-36060 · published 2023-03-28T19:57:57Z · modified 2023-11-08T04:09:59.154049Z · JSON