Skip to content
OpenAdvisories

Package · crates.io

matrix-sdk

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.2
    CVE-2025-53549

    Matrix Rust SDK allows SQL injection in the EventCache implementation

    The Matrix Rust SDK is a collection of libraries that make it easier to build Matrix clients in Rust. An SQL injection vulnerability in the EventCache::find_event_with_relations method of matrix-sdk 0.11 and 0.12 allows malicious room members to execute arbit…

    Matrix matrix-rust-sdk matrix-sdk matrix-sdk-sqlite crates.io
  • Medium —
    GHSA-fc4h-xcf3-qj5f

    matrix-sdk 0.6.0 logs access tokens

    When sending Matrix requests using an affected version of `matrix-sdk` in an application that writes logs using `tracing-subscriber` (in a way that includes fields of tracing spans such as `tracing_subscriber`s default text output from the `fmt` module), thes…

    matrix-sdk crates.io