The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
matrix-js-sdk is a Matrix messaging protocol Client-Server SDK for JavaScript. In versions prior to 24.0.0 events sent with special strings in key places can temporarily disrupt or impede the matrix-js-sdk from functioning properly, potentially impacting the consumer's ability to process data safely. Note that the matrix-js-sdk can appear to be operating normally but be excluding or corrupting runtime data presented to the consumer. This vulnerability is distinct from GHSA-rfv9-x7hh-xc32 which covers a similar issue. The issue has been patched in matrix-js-sdk 24.0.0 and users are advised to upgrade. There are no known workarounds for this vulnerability.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade thunderbird | Apr 21, 2023 | Mar 28, 2023 |
| Alpine Linux | — | Upgrade element-webUpgrade riot-web | Aug 22, 2024 | Mar 28, 2023 |
| Centos_linux | — | Upgrade thunderbird-debuginfoUpgrade thunderbird | Apr 18, 2023 | Mar 28, 2023 |
| Debian | — | Upgrade thunderbird | Apr 25, 2023 | Mar 28, 2023 |
| Freebsd | — | Upgrade cinnyUpgrade element-web | Mar 30, 2023 | Mar 29, 2023 |
| Gentoo Linux | — | Upgrade mail-client/thunderbird-bin.Upgrade mail-client/thunderbird. | May 31, 2023 | Mar 28, 2023 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 102.9.1Upgrade to the latest version of Mozilla Thunderbird | Mar 30, 2023 | Mar 28, 2023 |
| Oracle_linux | — | Upgrade thunderbird | Apr 18, 2023 | Mar 28, 2023 |
| Redhat_linux | — | Upgrade thunderbird-debugsourceUpgrade thunderbirdUpgrade thunderbird-debuginfoNo solution exists | Apr 18, 2023 | Mar 28, 2023 |
| Rocky_linux | — | Upgrade thunderbirdUpgrade thunderbird-debugsourceUpgrade thunderbird-debuginfo | Mar 12, 2024 | Mar 28, 2023 |
| Suse | — | Upgrade MozillaThunderbird-translations-commonUpgrade MozillaThunderbird-translations-otherUpgrade MozillaThunderbird | Apr 4, 2023 | Mar 28, 2023 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub