CVE-2025-53549
3 advisories.
crates.io/matrix-sdk CVE-2025-53549: medium, EPSS 0.31%
Matrix Rust SDK vulnerable to SQL Injection through its EventCache implementation
Action: Upgrade matrix-sdk to 0.13.0 or later.
cargo update -p matrix-sdk --precise 0.13.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.11.0 | 0.13.0 | - |
Fixed versions
| 0.13.0 |
Sources
- osv: GHSA-275g-g844-73jh
- https://github.com/matrix-org/matrix-rust-sdk/security/advisories/GHSA-275g-g844-73jh
- https://nvd.nist.gov/vuln/detail/CVE-2025-53549
- https://github.com/matrix-org/matrix-rust-sdk/pull/4849
- https://github.com/matrix-org/matrix-rust-sdk/commit/d0c01006e4808db5eb96ad5c496416f284d8bd3c
- https://github.com/matrix-org/matrix-rust-sdk
- https://rustsec.org/advisories/RUSTSEC-2025-0043.html
CVE-2025-53549 · published · modified · JSON
crates.io/matrix-sdk-sqlite CVE-2025-53549: medium, EPSS 0.31%
Matrix Rust SDK vulnerable to SQL Injection through its EventCache implementation
Action: Upgrade matrix-sdk-sqlite to 0.13.0 or later.
cargo update -p matrix-sdk-sqlite --precise 0.13.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.11.0 | 0.13.0 | - |
Fixed versions
| 0.13.0 |
Sources
- osv: GHSA-275g-g844-73jh#crates.io/matrix-sdk-sqlite
- https://github.com/matrix-org/matrix-rust-sdk/security/advisories/GHSA-275g-g844-73jh
- https://nvd.nist.gov/vuln/detail/CVE-2025-53549
- https://github.com/matrix-org/matrix-rust-sdk/pull/4849
- https://github.com/matrix-org/matrix-rust-sdk/commit/d0c01006e4808db5eb96ad5c496416f284d8bd3c
- https://github.com/matrix-org/matrix-rust-sdk
- https://rustsec.org/advisories/RUSTSEC-2025-0043.html
CVE-2025-53549 · published · modified · JSON
crates.io/matrix-sdk-sqlite CVE-2025-53549: unknown, EPSS 0.31%
matrix-sdk-sqlite: SQL injection vulnerability in `SqliteEventCacheStore::find_event_with_relations`
Action: Upgrade matrix-sdk-sqlite to 0.13.0 or later.
cargo update -p matrix-sdk-sqlite --precise 0.13.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.11.0 | 0.13.0 | - |
Fixed versions
| 0.13.0 |
Sources
- osv: RUSTSEC-2025-0043
- https://crates.io/crates/matrix-sdk-sqlite
- https://rustsec.org/advisories/RUSTSEC-2025-0043.html
- https://github.com/matrix-org/matrix-rust-sdk/pull/4849
CVE-2025-53549 · published · modified · JSON