npm/matrix-react-sdk CVE-2023-28103: high 8.2, EPSS 0.71%
Prototype pollution in matrix-react-sdk
Action: Upgrade matrix-react-sdk to 3.69.0 or later.
npm i matrix-react-sdk@3.69.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.69.0 | - |
Fixed versions
| 3.69.0 |
Sources
- osv: GHSA-6g43-88cp-w5gv
- https://github.com/matrix-org/matrix-react-sdk/security/advisories/GHSA-2x9c-qwgf-94xr
- https://github.com/matrix-org/matrix-react-sdk/security/advisories/GHSA-6g43-88cp-w5gv
- https://nvd.nist.gov/vuln/detail/CVE-2023-28103
- https://github.com/matrix-org/matrix-react-sdk
- https://matrix.org/blog/2023/03/28/security-releases-matrix-js-sdk-24-0-0-and-matrix-react-sdk-3-69-0
CVE-2023-28103 · published · modified · JSON