matrix-org matrix-rust-sdk

• CVE-2026-45056 Medium 6.9 Matrix Rust SDK: Sender-binding gaps in to-device and room-key attribution 0.3%
• CVE-2025-66622 Low 1.3 matrix-sdk-base is vulnerable to DoS via custom m.room.join_rules event values 0.4%
• CVE-2025-59047 Low 2.7 matrix-sdk-base has panic in the `RoomMember::normalized_power_level()` method 0.4%
• CVE-2025-53549 Medium 5.2 Matrix Rust SDK allows SQL injection in the EventCache implementation 0.3%
• CVE-2025-48937 Medium 4.9 matrix-sdk-crypto vulnerable to sender of encrypted events being spoofed by homeserver administrator 0.4%
• CVE-2024-52813 Medium 4.3 matrix-sdk-crypto missing facility to signal rotation of a verified cryptographic identity 0.5%
• CVE-2024-40648 Medium 5.4 `UserIdentity::is_verified` not checking verification status of own user identity while performing the check in matrix-rust-sdk 0.3%
• CVE-2022-39252 High 8.6 When matrix-rust-sdk recieves forwarded room keys, the reciever doesn't check if it requested the key from the forwarder 0.6%