matrix-react-sdk is a SDK for matrix.org using React
Affected versions of this package are vulnerable to Sandbox Bypass. The user content sandbox can be abused to trick users into opening unexpected documents. Messages and secrets are not at risk: the content is opened with a
blob origin, which cannot access Matrix user data.
matrix-react-sdk to version 3.15.0 or higher.