npm/matrix-react-sdk CVE-2023-37259: medium 6.1

matrix-react-sdk vulnerable to XSS in Export Chat feature

Action: Upgrade matrix-react-sdk to 3.76.0 or later.

npm i matrix-react-sdk@3.76.0

Affected

Fixed versions

Sources

• osv: GHSA-c9vx-2g7w-rp65
• https://github.com/matrix-org/matrix-react-sdk/security/advisories/GHSA-c9vx-2g7w-rp65
• https://nvd.nist.gov/vuln/detail/CVE-2023-37259
• https://github.com/matrix-org/matrix-react-sdk/commit/22fcd34c606f32129ebc967fc21f24fb708a98b8
• https://github.com/matrix-org/matrix-react-sdk
• https://github.com/matrix-org/matrix-react-sdk/releases/tag/v3.76.0

CVE-2023-37259 · published 2023-07-18T16:58:01Z · modified 2023-11-08T04:13:00.301912Z · JSON