matrix-org/matrix-rust-sdk Security Advisories | GitStock

medium2026-06-04

matrix-sdk-ui: Incomplete edit validation

GHSA-h97m-27fx-42rx · CVE-2026-45057

medium2026-06-04

Matrix Rust SDK: Sender-binding gaps in to-device and room-key attribution

GHSA-wfq4-36m3-9g42 · CVE-2026-45056

low2025-12-08

matrix-sdk-base denial of service via custom m.room.join_rules event values

GHSA-jj6p-3m75-g2p3 · CVE-2025-66622

low2025-09-11

matrix-sdk-base: Panic in the `RoomMember::normalized_power_level()` method

GHSA-qhj8-q5r6-8q6j · CVE-2025-59047

medium2025-07-10

Matrix Rust SDK vulnerable to SQL Injection through its EventCache implementation

GHSA-275g-g844-73jh · CVE-2025-53549

medium2025-06-10

matrix-sdk-crypto vulnerable to sender of encrypted events being spoofed by homeserver administrator

GHSA-x958-rvg6-956w · CVE-2025-48937

medium2025-01-07

matrix-sdk-crypto missing facility to signal rotation of a verified cryptographic identity

GHSA-r5vf-wf4h-82gg · CVE-2024-52813

medium2024-07-18

matrix-sdk-crypto's `UserIdentity::is_verified` not checking verification status of own user identity while performing the check

GHSA-4qg4-cvh2-crgg · CVE-2024-40648

medium2024-05-13

matrix-sdk-crypto contains a log exposure of private key of the server-side key backup

GHSA-9ggc-845v-gcgv · CVE-2024-34353

medium2022-10-25

matrix-sdk 0.6.0 logs access tokens

GHSA-fc4h-xcf3-qj5f

medium2022-09-30

matrix-sdk-crypto contains potential impersonation via room key forward responses

GHSA-vp68-2wrm-69qm · CVE-2022-39252