Security disclosure for matrix-js-sdk (CVE-2024-47080) and matrix-react-sdk (CVE-2024-47824)

toastal@lemmy.ml · 1 month ago

Security disclosure for matrix-js-sdk (CVE-2024-47080) and matrix-react-sdk (CVE-2024-47824)

mox@lemmy.sdf.org · edit-2 1 month ago

I don’t know if Element Web/Desktop was affected by the vulnerabilities in the title, but another one (also announced today) is fixed in Element Web/Desktop v1.11.81.

https://github.com/element-hq/element-web/security/advisories/GHSA-3jm3-x98c-r34x

fz0x1@lemmy.ml · 30 days ago

Nice backdoors)

toastal@lemmy.ml · 29 days ago

I mean Matrix was intiated by Israeli intelligence so not unreasonable