{"api_version":"v1","generated_at":"2026-10-08T17:10:00+00:00","product":{"cve_count":11,"evidence_gap_note":"Official registry publication history is linked, but a publisher support or retirement boundary has not been established.","id":"security:cve-matrix-org-matrix-js-sdk-7add6e955325","lifecycle_state":"evidence_gap","linked_lifecycle_url":"https://lifecycle.blacktree.nl/libraries/npm/matrix-js-sdk","name":"matrix-js-sdk","next_cursor":null,"observations":[{"affected":"< 38.2.0","affected_versions_present":true,"cve_id":"CVE-2025-59160","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-59160","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2025-09-16T18:26:33.217Z","patch_url":"","primary_source":"","published":"2025-09-16T16:37:54.185Z"},{"affected":"< 34.11.1","affected_versions_present":true,"cve_id":"CVE-2024-50336","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-50336","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2025-11-03T22:28:21.121Z","patch_url":"","primary_source":"","published":"2024-11-12T16:38:53.164Z"},{"affected":">= 9.11.0, < 34.8.0","affected_versions_present":true,"cve_id":"CVE-2024-47080","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-47080","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-10-15T17:34:44.173Z","patch_url":"","primary_source":"","published":"2024-10-15T14:53:01.752Z"},{"affected":"< 34.3.1","affected_versions_present":true,"cve_id":"CVE-2024-42369","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-42369","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-09-03T17:06:42.231Z","patch_url":"https://github.com/matrix-org/matrix-js-sdk/commit/a0efed8b881b3db6c9f2c71d6a6e74c2828978c6","primary_source":"","published":"2024-08-20T14:37:19.226Z"},{"affected":"< 24.1.0","affected_versions_present":true,"cve_id":"CVE-2023-29529","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-29529","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-02-06T18:45:34.043Z","patch_url":"https://github.com/matrix-org/matrix-spec-proposals/pull/3401","primary_source":"","published":"2023-04-14T18:21:17.050Z"},{"affected":"< 24.0.0","affected_versions_present":true,"cve_id":"CVE-2023-28427","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-28427","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2025-02-18T20:03:47.555Z","patch_url":"","primary_source":"","published":"2023-03-28T20:32:22.116Z"},{"affected":"< 19.4.0","affected_versions_present":true,"cve_id":"CVE-2022-36059","cve_url":"https://cve.blacktree.nl/cve/CVE-2022-36059","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2025-02-18T20:05:37.448Z","patch_url":"","primary_source":"","published":"2023-03-28T20:32:18.422Z"},{"affected":"< 19.7.0","affected_versions_present":true,"cve_id":"CVE-2022-39250","cve_url":"https://cve.blacktree.nl/cve/CVE-2022-39250","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-04-23T16:54:16.797Z","patch_url":"https://github.com/matrix-org/matrix-js-sdk/commit/a587d7c36026fe1fcf93dfff63588abee359be76","primary_source":"","published":"2022-09-29T00:00:00.000Z"},{"affected":"< 19.7.0","affected_versions_present":true,"cve_id":"CVE-2022-39251","cve_url":"https://cve.blacktree.nl/cve/CVE-2022-39251","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-04-23T16:55:05.561Z","patch_url":"https://github.com/matrix-org/matrix-js-sdk/commit/a587d7c36026fe1fcf93dfff63588abee359be76","primary_source":"","published":"2022-09-28T00:00:00.000Z"},{"affected":"< 19.7.0","affected_versions_present":true,"cve_id":"CVE-2022-39249","cve_url":"https://cve.blacktree.nl/cve/CVE-2022-39249","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-04-23T16:55:11.362Z","patch_url":"https://github.com/matrix-org/matrix-js-sdk/commit/a587d7c36026fe1fcf93dfff63588abee359be76","primary_source":"","published":"2022-09-28T00:00:00.000Z"},{"affected":">= 17.1.0-rc.1, < 19.7.0","affected_versions_present":true,"cve_id":"CVE-2022-39236","cve_url":"https://cve.blacktree.nl/cve/CVE-2022-39236","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-04-23T16:55:17.226Z","patch_url":"https://github.com/matrix-org/matrix-spec-proposals/pull/3488","primary_source":"","published":"2022-09-28T00:00:00.000Z"}],"source_generated_at":"2026-10-08T06:18:52.353Z","vendor":"matrix-org"}}