{"action":"Upgrade matrix-sdk-base to 0.16.0 or later.","affected":[{"fixed":"0.16.0","introduced":"0.0.0-0"}],"component":"matrix-sdk-base","cve_ids":["CVE-2025-66622"],"ecosystem":"crates.io","epss":0.00443,"exploited":false,"fixed_versions":["0.16.0"],"ghsa_id":"GHSA-jj6p-3m75-g2p3","id":"tcs_01M5KFAFB09RZVR1ZW5GBKVHP0","modified_at":"2026-10-12T18:00:07.355162307Z","published_at":"2025-12-08T12:00:00Z","references":["https://osv.dev/vulnerability/RUSTSEC-2025-0135","https://crates.io/crates/matrix-sdk-base","https://rustsec.org/advisories/RUSTSEC-2025-0135.html","https://github.com/matrix-org/matrix-rust-sdk/pull/5924"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"RUSTSEC-2025-0135","url":"https://osv.dev/vulnerability/RUSTSEC-2025-0135"},{"source":"nvd","source_id":"CVE-2025-66622","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-66622"}],"summary":"matrix-sdk-base: Denial of service due to custom `m.room.join_rules` events"}