GHSA-2x9c-qwgf-94xr
matrix-react-sdk Prototype pollution vulnerability
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| npm | matrix-react-sdk | < 3.53.0 | 3.53.0 |
Details
As written in the advisory (Markdown source, shown as plain text).
### Impact
Events sent with special strings in key places can temporarily disrupt or impede the matrix-react-sdk from functioning properly, such as by causing room or event tile crashes. The remainder of the application can appear functional, though certain rooms/events will not be rendered.
### Patches
This is fixed in matrix-react-sdk 3.53.0
### Workarounds
There are no workarounds. Please upgrade immediately.
### References
https://learn.snyk.io/lessons/prototype-pollution/javascript/
### For more information
If you have any questions or comments about this advisory please email us at [security at matrix.org](mailto:[email protected]).
References
External links from the advisory. They lead to third-party sites.