crates.io/matrix-sdk-sqlite CVE-2025-53549: medium 5.2, EPSS 0.31%

matrix-sdk-sqlite: SQL injection vulnerability in `SqliteEventCacheStore::find_event_with_relations`

Action: Upgrade matrix-sdk-sqlite to 0.13.0 or later.

cargo update -p matrix-sdk-sqlite --precise 0.13.0

Affected

Fixed versions

Sources

• osv: RUSTSEC-2025-0043
• nvd: CVE-2025-53549
• https://crates.io/crates/matrix-sdk-sqlite
• https://rustsec.org/advisories/RUSTSEC-2025-0043.html
• https://github.com/matrix-org/matrix-rust-sdk/pull/4849

CVE-2025-53549 · published 2025-07-11T12:00:00Z · modified 2026-10-12T18:00:10.950538086Z · JSON