Security disclosure for matrix-js-sdk (CVE-2024-47080) and matrix-react-sdk (CVE-2024-47824)

toastal@lemmy.ml · 2 months ago

Security disclosure for matrix-js-sdk (CVE-2024-47080) and matrix-react-sdk (CVE-2024-47824)

fz0x1@lemmy.ml · 2 months ago

Nice backdoors)

toastal@lemmy.ml · 2 months ago

I mean Matrix was intiated by Israeli intelligence so not unreasonable

mox@lemmy.sdf.org · edit-2 2 months ago

I don’t know if Element Web/Desktop was affected by the vulnerabilities in the title, but another one (also announced today) is fixed in Element Web/Desktop v1.11.81.

https://github.com/element-hq/element-web/security/advisories/GHSA-3jm3-x98c-r34x