{"action":"Upgrade matrix-sdk-base to 0.16.0 or later.","affected":[{"fixed":"0.16.0","introduced":"0"}],"component":"matrix-sdk-base","cve_ids":["CVE-2025-66622"],"ecosystem":"crates.io","epss":0.00413,"exploited":false,"fixed_versions":["0.16.0"],"ghsa_id":"GHSA-jj6p-3m75-g2p3","id":"tcs_01M5KF12NZ548CV3RVXTT44N9K","modified_at":"2025-12-09T19:36:28.271982Z","published_at":"2025-12-08T22:07:47Z","references":["https://osv.dev/vulnerability/GHSA-jj6p-3m75-g2p3","https://github.com/matrix-org/matrix-rust-sdk/security/advisories/GHSA-jj6p-3m75-g2p3","https://nvd.nist.gov/vuln/detail/CVE-2025-66622","https://github.com/matrix-org/matrix-rust-sdk/pull/5924","https://github.com/matrix-org/matrix-rust-sdk/commit/4ea0418abefab2aa93f8851a4d39c723e703e6b0","https://github.com/matrix-org/matrix-rust-sdk","https://rustsec.org/advisories/RUSTSEC-2025-0135.html"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-jj6p-3m75-g2p3","url":"https://osv.dev/vulnerability/GHSA-jj6p-3m75-g2p3"},{"source":"nvd","source_id":"CVE-2025-66622","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-66622"}],"summary":"matrix-sdk-base denial of service via custom m.room.join_rules event values"}