Product by Matrix-org
Matrix-rust-sdk
8 known vulnerabilities in Matrix-rust-sdk (Matrix-org), 0 of them actively exploited (CISA KEV).
Key figures
8
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Medium | CVE-2026-45056 | Matrix Rust SDK: Sender-binding gaps in to-device and room-key attribution | — | |
| High | CVE-2022-39252 | Matrix-org Matrix-rust-sdk: Key Exchange without Entity Authentication | 8.6 | |
| High | CVE-2025-66622 | matrix-sdk-base is vulnerable to DoS via custom m.room.join_rules event values | 7.5 | |
| Medium | CVE-2024-52813 | matrix-sdk-crypto missing facility to signal rotation of a verified cryptographic identity | 4.3 | |
| Medium | CVE-2025-48937 | matrix-sdk-crypto vulnerable to sender of encrypted events being spoofed by homeserver administrator | 4.9 | |
| Medium | CVE-2025-53549 | Matrix Rust SDK allows SQL injection in the EventCache implementation | — | |
| Medium | CVE-2024-40648 | Matrix-org Matrix-rust-sdk: Improper Authentication | 5.4 | |
| Low | CVE-2025-59047 | matrix-sdk-base has panic in the `RoomMember::normalized_power_level()` method | — |