Prototype pollution in matrix-js-sdk
CVE-2023-28427

8.2HIGH

Key Information:

Vendor: Matrix-org
Status: Matrix-js-sdk
Vendor: CVE Published:; 28 March 2023

What is CVE-2023-28427?

The matrix-js-sdk, a Client-Server SDK for the Matrix messaging protocol, exhibits a vulnerability that allows events containing special strings to interfere with its normal operation. This disruption can manifest as the exclusion or corruption of runtime data that is critical for users, even though the SDK may appear to function normally. As the problem can significantly impact the safe processing of data, users are strongly advised to upgrade to matrix-js-sdk version 24.0.0 or later, as there are currently no viable workarounds available for this issue. Further details on the vulnerability can be found in the relevant security advisories.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch