{"action":"Upgrade matrix-sdk-crypto to 0.7.1 or later.","affected":[{"fixed":"0.7.1","introduced":"0.7.0"}],"component":"matrix-sdk-crypto","cve_ids":["CVE-2024-34353"],"ecosystem":"crates.io","epss":0.00193,"exploited":false,"fixed_versions":["0.7.1"],"ghsa_id":"GHSA-9ggc-845v-gcgv","id":"tcs_01M5KEWDRE83KPN3R0FJJ7CBBR","modified_at":"2026-09-10T03:50:13.670354018Z","published_at":"2024-05-13T16:04:37Z","references":["https://osv.dev/vulnerability/GHSA-9ggc-845v-gcgv","https://github.com/matrix-org/matrix-rust-sdk/security/advisories/GHSA-9ggc-845v-gcgv","https://nvd.nist.gov/vuln/detail/CVE-2024-34353","https://github.com/matrix-org/matrix-rust-sdk/commit/71136e44c03c79f80d6d1a2446673bc4d53a2067","https://github.com/matrix-org/matrix-rust-sdk/commit/fa10bbb5dd0f9120a51aa1854cec752e25790bb0","https://github.com/matrix-org/matrix-rust-sdk","https://github.com/matrix-org/matrix-rust-sdk/releases/tag/matrix-sdk-crypto-0.7.1"],"severity":{"label":"medium","score":5.5},"sources":[{"source":"osv","source_id":"GHSA-9ggc-845v-gcgv","url":"https://osv.dev/vulnerability/GHSA-9ggc-845v-gcgv"}],"summary":"matrix-sdk-crypto contains a log exposure of private key of the server-side key backup"}