SQL Injection in Matrix-org Matrix-rust-sdk
CVE-2025-53549
The Matrix Rust SDK is a collection of libraries that make it easier to build Matrix clients in Rust. An SQL injection vulnerability in the EventCache::find_event_with_relations method of matrix-sdk 0.11 and 0.12 allows malicious room memb…
Vulnerability class: SQL Injection
EPSS: 0.003 (16.9th percentile) — read the EPSS interpretation.
Affected products
- Matrix-org Matrix-rust-sdk — versions >= 0.11, < 0.13
Weakness classification (CWE)
References
- security-advisories@github.com (x_refsource_CONFIRM)
- security-advisories@github.com (x_refsource_MISC)