{"action":"Upgrade matrix-sdk-crypto to 0.7.2 or later.","affected":[{"fixed":"0.7.2","introduced":"0.0.0-0"}],"component":"matrix-sdk-crypto","cve_ids":["CVE-2024-40648"],"ecosystem":"crates.io","epss":0.0028,"exploited":false,"fixed_versions":["0.7.2"],"ghsa_id":"GHSA-4qg4-cvh2-crgg","id":"tcs_01M5KF98PN0WD70V4PRFEV7B9K","modified_at":"2026-10-12T18:00:12.405685687Z","published_at":"2024-07-18T12:00:00Z","references":["https://osv.dev/vulnerability/RUSTSEC-2024-0356","https://crates.io/crates/matrix-sdk-crypto","https://rustsec.org/advisories/RUSTSEC-2024-0356.html","https://github.com/matrix-org/matrix-rust-sdk/commit/76a7052149bb8f722df12da915b3a06d19a6695a"],"severity":{"label":"medium","score":5.4},"sources":[{"source":"osv","source_id":"RUSTSEC-2024-0356","url":"https://osv.dev/vulnerability/RUSTSEC-2024-0356"},{"source":"nvd","source_id":"CVE-2024-40648","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-40648"}],"summary":"`UserIdentity::is_verified` not checking verification status of own user identity while performing the check"}