crates.io/matrix-sdk-crypto CVE-2022-39252: high 7.5, EPSS 0.63%
matrix-sdk Impersonation of room keys
Action: Upgrade matrix-sdk-crypto to 0.6.0 or later.
cargo update -p matrix-sdk-crypto --precise 0.6.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.0.0-0 | 0.6.0 | - |
Fixed versions
| 0.6.0 |
Sources
- osv: RUSTSEC-2022-0085
- https://crates.io/crates/matrix-sdk-crypto
- https://rustsec.org/advisories/RUSTSEC-2022-0085.html
- https://github.com/matrix-org/matrix-rust-sdk/commit/093fb5d0aa21c0b5eaea6ec96b477f1075271cbb
- https://github.com/matrix-org/matrix-rust-sdk/commit/41449d2cc360e347f5d4e1c154ec1e3185f11acd
CVE-2022-39252 · published · modified · JSON