matrix-rust-sdk — Vulnerabilities & Security Advisories 8

All 8 CVE vulnerabilities found in matrix-rust-sdk, with AI-generated Chinese analysis, references, and POCs.

CVE ID	Title	CVSS	Severity	Published
CVE-2026-45056	Matrix Rust SDK: Sender-binding gaps in to-device and room-key attribution CWE-290	6.9	Medium	2026-09-11
CVE-2025-66622	matrix-sdk-base is vulnerable to DoS via custom m.room.join_rules event values CWE-755	7.5^AI	High ^AI	2025-12-09
CVE-2025-59047	matrix-sdk-base has panic in the `RoomMember::normalized_power_level()` method CWE-682	7.5^AI	High ^AI	2025-09-11
CVE-2025-53549	Matrix Rust SDK allows SQL injection in the EventCache implementation CWE-89	8.8^AI	High ^AI	2025-07-10
CVE-2025-48937	matrix-sdk-crypto vulnerable to sender of encrypted events being spoofed by homeserver administrator CWE-290	4.9	Medium	2025-06-10
CVE-2024-52813	matrix-sdk-crypto missing facility to signal rotation of a verified cryptographic identity CWE-223	4.3	Medium	2025-01-07
CVE-2024-40648	`UserIdentity::is_verified` not checking verification status of own user identity while performing the check in matrix-rust-sdk CWE-287	5.4	Medium	2024-07-18
CVE-2022-39252	When matrix-rust-sdk recieves forwarded room keys, the reciever doesn't check if it requested the key from the forwarder CWE-322	8.6	High	2022-09-29

All 8 known CVE vulnerabilities affecting matrix-rust-sdk with full Chinese analysis, references, and POCs where available.