GHSA-mp7c-m3rh-r56v
GitHub Security Advisory
matrix-js-sdk has insufficient validation when considering a room to be upgraded by another
✓ GitHub Reviewed
LOW
Has CVE
Advisory Details
### Impact
matrix-js-sdk before 38.2.0 has insufficient validation of room predecessor links in `MatrixClient::getJoinedRooms`, allowing a remote attacker to attempt to replace a tombstoned room with an unrelated attacker-supplied room.
### Patches
The issue has been patched and users should upgrade to 38.2.0.
### Workarounds
Avoid using `MatrixClient::getJoinedRooms` in favour of `getRooms()` and filtering upgraded rooms separately.
Affected Packages
npm
matrix-js-sdk
Affected versions:
0
(fixed in 38.2.0)
Related CVEs
Key Information
2.5
/10
Dataset
Last updated: September 19, 2025 6:29 AM
Data from GitHub Advisory Database. This information is provided for research and educational purposes.