crates.io/matrix-sdk CVE-2025-53549: medium 5.2, EPSS 0.31%

Matrix Rust SDK vulnerable to SQL Injection through its EventCache implementation

Action: Upgrade matrix-sdk to 0.13.0 or later.

cargo update -p matrix-sdk --precise 0.13.0

Affected

Fixed versions

Sources

• osv: GHSA-275g-g844-73jh
• nvd: CVE-2025-53549
• https://github.com/matrix-org/matrix-rust-sdk/security/advisories/GHSA-275g-g844-73jh
• https://github.com/matrix-org/matrix-rust-sdk/pull/4849
• https://github.com/matrix-org/matrix-rust-sdk/commit/d0c01006e4808db5eb96ad5c496416f284d8bd3c
• https://github.com/matrix-org/matrix-rust-sdk
• https://rustsec.org/advisories/RUSTSEC-2025-0043.html

CVE-2025-53549 · published 2025-07-10T17:41:16Z · modified 2025-07-11T20:45:34Z · JSON