Skip to content
OpenAdvisories

Package · crates.io

matrix-sdk-base

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Low 1.3
    CVE-2025-66622

    matrix-sdk-base is vulnerable to DoS via custom m.room.join_rules event values

    matrix-sdk-base is the base component to build a Matrix client library. Versions 0.14.1 and prior are unable to handle responses that include custom m.room.join_rules values due to a serialization bug. This can be exploited to cause a denial-of-service condit…

    Matrix matrix-rust-sdk matrix-sdk-base crates.io
  • Low 2.7
    CVE-2025-59047

    matrix-sdk-base has panic in the `RoomMember::normalized_power_level()` method

    matrix-sdk-base is the base component to build a Matrix client library. In matrix-sdk-base before 0.14.1, calling the `RoomMember::normalized_power_level()` method can cause a panic if a room member has a power level of `Int::Min`. The issue is fixed in matri…

    Matrix matrix-rust-sdk matrix-sdk-base crates.io