{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0"}],"component":"node-matrix-js-sdk","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:11","exploited":false,"fixed_versions":[],"id":"tcs_01M5NKXSPNS0BH8QWHPVYHZEDB","modified_at":"2026-08-27T23:05:12.448482024Z","published_at":"2024-08-20T15:15:21.540Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2024-42369","https://security-tracker.debian.org/tracker/CVE-2024-42369"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2024-42369","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2024-42369"}],"summary":"matrix-js-sdk is a Matrix messaging protocol Client-Server SDK for JavaScript. A malicious homeserver can craft a room or room structure such that the predecessors form a cycle. The matrix-js-sdk's ge"}