Support Us — Your donation helps us keep running

Goal: 1000 CNY，Raised: 1000 CNY

100.0%
Donate Now

matrix-rust-sdk — Vulnerabilities & Security Advisories 7

All 7 CVE vulnerabilities found in matrix-rust-sdk, with AI-generated Chinese analysis, references, and POCs.

Vendor: matrix-org

CVE IDTitleCVSSSeverityPaused
CVE-2025-66622 matrix-sdk-base is vulnerable to DoS via custom m.room.join_rules event values CWE-755 7.5AIHighAI2025-12-09
CVE-2025-59047 matrix-sdk-base has panic in the `RoomMember::normalized_power_level()` method CWE-682 7.5AIHighAI2025-09-11
CVE-2025-53549 Matrix Rust SDK allows SQL injection in the EventCache implementation CWE-89 8.8AIHighAI2025-07-10
CVE-2025-48937 matrix-sdk-crypto vulnerable to sender of encrypted events being spoofed by homeserver administrator CWE-290 4.9 Medium2025-06-10
CVE-2024-52813 matrix-sdk-crypto missing facility to signal rotation of a verified cryptographic identity CWE-223 4.3 Medium2025-01-07
CVE-2024-40648 `UserIdentity::is_verified` not checking verification status of own user identity while performing the check in matrix-rust-sdk CWE-287 5.4 Medium2024-07-18
CVE-2022-39252 When matrix-rust-sdk recieves forwarded room keys, the reciever doesn't check if it requested the key from the forwarder CWE-322 8.6 High2022-09-29

All 7 known CVE vulnerabilities affecting matrix-rust-sdk with full Chinese analysis, references, and POCs where available.