{"action":"Upgrade matrix-sdk-ui to 0.16.1 or later.","affected":[{"fixed":"0.16.1","introduced":"0.0.0-0"}],"component":"matrix-sdk-ui","cve_ids":["CVE-2026-45057"],"ecosystem":"crates.io","epss":0.00233,"exploited":false,"fixed_versions":["0.16.1"],"ghsa_id":"GHSA-h97m-27fx-42rx","id":"tcs_01M5KFBJNR1H40APVZBJJHYA0H","modified_at":"2026-10-12T18:00:14.300850042Z","published_at":"2026-06-03T12:00:00Z","references":["https://osv.dev/vulnerability/RUSTSEC-2026-0158","https://crates.io/crates/matrix-sdk-ui","https://rustsec.org/advisories/RUSTSEC-2026-0158.html","https://github.com/matrix-org/matrix-rust-sdk/pull/6454"],"severity":{"label":"medium","score":4.9},"sources":[{"source":"osv","source_id":"RUSTSEC-2026-0158","url":"https://osv.dev/vulnerability/RUSTSEC-2026-0158"}],"summary":"Incomplete message edit validation in matrix-sdk-ui"}