{"action":"Upgrade matrix-js-sdk to 34.3.1 or later.","affected":[{"fixed":"34.3.1","introduced":"0"}],"component":"matrix-js-sdk","cve_ids":["CVE-2024-42369"],"ecosystem":"npm","epss":0.00483,"exploited":false,"fixed_versions":["34.3.1"],"ghsa_id":"GHSA-vhr5-g3pm-49fm","id":"tcs_01M5KGC1C86XACD4BJNSCPKK5S","modified_at":"2024-08-20T18:58:55.366577Z","published_at":"2024-08-20T18:35:27Z","references":["https://osv.dev/vulnerability/GHSA-vhr5-g3pm-49fm","https://github.com/matrix-org/matrix-js-sdk/security/advisories/GHSA-vhr5-g3pm-49fm","https://nvd.nist.gov/vuln/detail/CVE-2024-42369","https://github.com/matrix-org/matrix-js-sdk/commit/a0efed8b881b3db6c9f2c71d6a6e74c2828978c6","https://github.com/matrix-org/matrix-js-sdk"],"severity":{"label":"medium","score":4.1},"sources":[{"source":"osv","source_id":"GHSA-vhr5-g3pm-49fm","url":"https://osv.dev/vulnerability/GHSA-vhr5-g3pm-49fm"}],"summary":"matrix-js-sdk will freeze when a user sets a room with itself as a its predecessor"}