Description
matrix-sdk-base is the base component to build a Matrix client library. Versions 0.14.1 and prior are unable to handle responses that include custom m.room.join_rules values due to a serialization bug. This can be exploited to cause a denial-of-service condition, if a user is invited to a room with non-standard join rules, the crate's sync process will stall, preventing further processing for all rooms. This is fixed in version 0.16.0.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| matrix-org | matrix-rust-sdk | < 0.16.0 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| crates.io | matrix-sdk-base | < 0.16.0 | 0.16.0 | GHSA-jj6p-3m75-g2p3 |
| crates.io | matrix-sdk-base | >= 0.0.0-0, < 0.16.0 | 0.16.0 | RUSTSEC-2025-0135 |