Login Request a demo
MA
Product
matrix-js-sdk
by matrix-org · last CVE Sep 16, 2025
2
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Vulnerabilities2In the news0Timeline
Severity mix
Critical 0High 1Medium 0Low 1
Severity
All severities2Critical0High1Medium0Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add matrix-js-sdk to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2022-39250
7.5
1%
Sep 29
Matrix JavaScript SDK vulnerable to key/device identifier confusion in SAS verification
Affected: < 19.7.0
CVE-2025-59160
2.7
0%
Sep 16
matrix-js-sdk has insufficient validation when considering a room to be upgraded by another
Affected: < 38.2.0
Showing 2