Security disclosure for matrix-js-sdk (CVE-2024-47080) and matrix-react-sdk (CVE-2024-47824)

toastal@lemmy.ml · 21 days ago

Security disclosure for matrix-js-sdk (CVE-2024-47080) and matrix-react-sdk (CVE-2024-47824)

mox@lemmy.sdf.org · edit-2 21 days ago

I don’t know if Element Web/Desktop was affected by the vulnerabilities in the title, but another one (also announced today) is fixed in Element Web/Desktop v1.11.81.

https://github.com/element-hq/element-web/security/advisories/GHSA-3jm3-x98c-r34x

fz0x1@lemmy.ml · 20 days ago

Nice backdoors)

toastal@lemmy.ml · 20 days ago

I mean Matrix was intiated by Israeli intelligence so not unreasonable