https://vulnerability.circl.lu/sightings/feed 2026-05-05T14:58:27.199896+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/1a6896d4-79f9-4eaf-8c75-e5cec2ec0fb8/export 2026-05-05T14:58:27.567731+00:00 Automation user http://vulnerability.circl.lu/user/automation {"uuid": "1a6896d4-79f9-4eaf-8c75-e5cec2ec0fb8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-42369", "type": "seen", "source": "https://t.me/cvedetector/3664", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2024-42369 - Matrix-js-sdk Infinite Recursion Vulnerability\", \n \"Content\": \"CVE ID : CVE-2024-42369 \nPublished : Aug. 20, 2024, 3:15 p.m. | 42\u00a0minutes ago \nDescription : matrix-js-sdk is a Matrix messaging protocol Client-Server SDK for JavaScript. A malicious homeserver can craft a room or room structure such that the predecessors form a cycle. The matrix-js-sdk's getRoomUpgradeHistory function will infinitely recurse in this case, causing the code to hang. This method is public but also called by the 'leaveRoomChain()' method, so leaving a room will also trigger the bug. This was patched in matrix-js-sdk 34.3.1. \nSeverity: 4.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"20 Aug 2024\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-20T17:58:38.000000Z"} 2024-08-20T17:58:38+00:00