matrix-sdk-crypto vulnerabilities
CVEs whose affected-version data names the matrix-sdk-crypto package (rust). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
4 CVEsRSS
RUSTSEC-2026-0318NoneSending custom to-device messages may panics
Sending custom to-device messages may panics
▾ Sunlitmatrix-sdk-crypto · matrix-sdk-cryptovia OSV
CVE-2025-48937Medium· 4.9matrix-sdk-crypto vulnerable to encrypted event sender spoofing by homeserver administrator
matrix-sdk-crypto vulnerable to encrypted event sender spoofing by homeserver administrator
▾ Sunlitmatrix-sdk-crypto · matrix-sdk-cryptoEPSS 0.37%via OSV
CVE-2024-40648None`UserIdentity::is_verified` not checking verification status of own user identity while performing the check
`UserIdentity::is_verified` not checking verification status of own user identity while performing the check
▾ Sunlitmatrix-sdk-crypto · matrix-sdk-cryptoEPSS 0.28%via OSV
CVE-2024-52813NoneMissing facility to signal rotation of a verified cryptographic identity
Missing facility to signal rotation of a verified cryptographic identity
▾ Sunlitmatrix-sdk-crypto · matrix-sdk-cryptoEPSS 0.49%via OSV