NOTE - The Matrix.org Foundation is disclosing two vulnerabilities in matrix-js-sdk and matrix-react-sdk today. These have been PATCHED ALREADY, since Element Web and Desktop version 1.11.70.