MA
Product
matrix-rust-sdk
7
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 2Medium 4Low 1
Watch
Add matrix-rust-sdk to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-66622 | 7.5 | Dec 9 | matrix-sdk-base is vulnerable to DoS via custom m.room.join_rules event values Affected: < 0.16.0 |
| CVE-2022-39252 | 7.5 | Sep 29 | When matrix-rust-sdk recieves forwarded room keys, the reciever doesn't check if it requested the key from the forwarder Affected: < 0.6 |
| CVE-2026-45056 | 6.9 | Sep 11 | Matrix Rust SDK: Sender-binding gaps in to-device and room-key attribution Affected: >= 0.12.0, < 0.16.1 |
| CVE-2025-53549 | 5.2 | Jul 10 | Matrix Rust SDK allows SQL injection in the EventCache implementation Affected: >= 0.11, < 0.13 |
| CVE-2025-48937 | 4.9 | Jun 10 | matrix-sdk-crypto vulnerable to sender of encrypted events being spoofed by homeserver administrator Affected: >= 0.8.0, < 0.11.1 |
| CVE-2024-52813 | 4.3 | Jan 7 | matrix-sdk-crypto missing facility to signal rotation of a verified cryptographic identity Affected: < 0.8.0 |
| CVE-2025-59047 | 2.7 | Sep 11 | matrix-sdk-base has panic in the `RoomMember::normalized_power_level()` method Affected: < 0.14.1 |
Showing 7