{"action":"Upgrade matrix-react-sdk to 3.102.0 or later.","affected":[{"fixed":"3.102.0","introduced":"3.18.0"}],"component":"matrix-react-sdk","cve_ids":["CVE-2024-47824"],"ecosystem":"npm","epss":0.00656,"exploited":false,"fixed_versions":["3.102.0"],"ghsa_id":"GHSA-qcvh-p9jq-wp8v","id":"tcs_01M5KG5Y9MSVM1Y0YK6R95K60N","modified_at":"2024-10-15T19:56:05Z","published_at":"2024-10-15T18:11:51Z","references":["https://osv.dev/vulnerability/GHSA-qcvh-p9jq-wp8v","https://github.com/matrix-org/matrix-react-sdk/security/advisories/GHSA-qcvh-p9jq-wp8v","https://nvd.nist.gov/vuln/detail/CVE-2024-47824","https://github.com/matrix-org/matrix-react-sdk/pull/12618","https://github.com/matrix-org/matrix-react-sdk/commit/6fc9d7641c51ca3db8225cf58b9d6e6fdd2d6556","https://github.com/matrix-org/matrix-react-sdk"],"severity":{"label":"unknown","score":0},"sources":[{"source":"osv","source_id":"GHSA-qcvh-p9jq-wp8v","url":"https://osv.dev/vulnerability/GHSA-qcvh-p9jq-wp8v"}],"summary":"Malicious homeservers can steal message keys when the matrix-react-sdk user invites another user to a room"}