Vulnerability in Matrix-org Matrix-js-sdk
CVE-2025-59160
Matrix JavaScript SDK is a Matrix Client-Server SDK for JavaScript and TypeScript. matrix-js-sdk before 38.2.0 has insufficient validation of room predecessor links in MatrixClient::getJoinedRooms, allowing a remote attacker to attempt to…
EPSS: 0.002 (13.5th percentile) — read the EPSS interpretation.
Affected products
- Matrix-org Matrix-js-sdk — versions < 38.2.0
Weakness classification (CWE)
References
- security-advisories@github.com (x_refsource_CONFIRM)
- security-advisories@github.com (x_refsource_MISC)