Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
matrix-sdk-crypto
Rust / Cargo
· Package
7 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
matrix-sdk-crypto's `UserIdentity::is_verified` not checking verification status of own user identity while performing the check
CVE-2024-40648 · GHSA-4QG4-CVH2-CRGG
Version ranges need review.
matrix-sdk-crypto
Rust / Cargo
Medium
Fix reported
2026-10-12
matrix-sdk-crypto vulnerable to sender of encrypted events being spoofed by homeserver administrator
CVE-2025-48937 · GHSA-X958-RVG6-956W
Version ranges need review.
matrix-sdk-crypto
Rust / Cargo
Medium
Fix reported
2026-10-12
Matrix Rust SDK: Sender-binding gaps in to-device and room-key attribution
CVE-2026-45056 · GHSA-WFQ4-36M3-9G42
Version ranges need review.
matrix-sdk-crypto
Rust / Cargo
Medium
Fix reported
2026-10-12
Sending custom to-device messages may panics
GHSA-45PR-7VV7-F64M · RUSTSEC-2026-0318
matrix-sdk-crypto
Rust / Cargo
Unknown
Fix reported
2026-10-02
matrix-sdk-crypto contains a log exposure of private key of the server-side key backup
CVE-2024-34353 · GHSA-9GGC-845V-GCGV
matrix-sdk-crypto
Rust / Cargo
Medium
Fix reported
2026-09-10
matrix-sdk-crypto missing facility to signal rotation of a verified cryptographic identity
CVE-2024-52813 · GHSA-R5VF-WF4H-82GG
matrix-sdk-crypto
Rust / Cargo
Medium
Fix reported
2025-01-22
matrix-sdk-crypto contains potential impersonation via room key forward responses
CVE-2022-39252 · GHSA-VP68-2WRM-69QM
Version ranges need review.
matrix-sdk-crypto
Rust / Cargo
Medium
Fix reported
2023-11-08
