{"api_version":"v1","generated_at":"2026-10-07T06:15:00+00:00","product":{"cve_count":8,"evidence_gap_note":"Official registry publication history is linked, but a publisher support or retirement boundary has not been established.","id":"security:cve-matrix-org-matrix-react-sdk-1344b5340d9b","lifecycle_state":"evidence_gap","linked_lifecycle_url":"https://lifecycle.blacktree.nl/libraries/npm/matrix-react-sdk","name":"matrix-react-sdk","next_cursor":null,"observations":[{"affected":">= 3.18.0, < 3.102.0","affected_versions_present":true,"cve_id":"CVE-2024-47824","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-47824","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-11-21T16:52:42.888Z","patch_url":"","primary_source":"","published":"2024-10-15T15:40:37.397Z"},{"affected":"< 3.105.1","affected_versions_present":true,"cve_id":"CVE-2024-42347","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-42347","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-08-08T18:48:19.919Z","patch_url":"","primary_source":"","published":"2024-08-06T17:16:14.143Z"},{"affected":">= 3.32.0, < 3.76.0","affected_versions_present":true,"cve_id":"CVE-2023-37259","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-37259","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-10-18T17:24:35.910Z","patch_url":"https://github.com/matrix-org/matrix-react-sdk/commit/22fcd34c606f32129ebc967fc21f24fb708a98b8","primary_source":"","published":"2023-07-18T16:59:21.659Z"},{"affected":"< 3.71.0","affected_versions_present":true,"cve_id":"CVE-2023-30609","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-30609","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-02-03T17:54:55.060Z","patch_url":"https://github.com/matrix-org/matrix-react-sdk/commit/bf182bc94556849d7acdfa0e5fdea2aa129ea826","primary_source":"","published":"2023-04-25T20:58:27.966Z"},{"affected":"< 3.53.0","affected_versions_present":true,"cve_id":"CVE-2022-36060","cve_url":"https://cve.blacktree.nl/cve/CVE-2022-36060","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2025-02-18T19:56:49.200Z","patch_url":"","primary_source":"","published":"2023-03-28T20:37:28.691Z"},{"affected":"< 3.69.0","affected_versions_present":true,"cve_id":"CVE-2023-28103","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-28103","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2025-02-18T17:26:55.589Z","patch_url":"","primary_source":"","published":"2023-03-28T20:37:24.288Z"},{"affected":"< 3.21.0","affected_versions_present":true,"cve_id":"CVE-2021-32622","cve_url":"https://cve.blacktree.nl/cve/CVE-2021-32622","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-03T23:25:30.863Z","patch_url":"https://github.com/matrix-org/matrix-react-sdk/security/advisories/GHSA-8796-gc9j-63rv","primary_source":"","published":"2021-05-17T19:35:11.000Z"},{"affected":"< 3.15.0","affected_versions_present":true,"cve_id":"CVE-2021-21320","cve_url":"https://cve.blacktree.nl/cve/CVE-2021-21320","fixed":"3.15.0.","last_modified":"2024-08-03T18:09:15.273Z","patch_url":"https://github.com/matrix-org/matrix-react-sdk/pull/5657","primary_source":"","published":"2021-03-02T02:45:16.000Z"}],"source_generated_at":"2026-10-06T06:22:27.870Z","vendor":"matrix-org"}}