matrix-sdk-crypto vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2026-45056Mediummatrix-sdk-crypto: Matrix Rust SDK: Sender-binding gaps in to-device and room-key attribution CVE-2025-48937Mediummatrix-sdk-crypto: matrix-sdk-crypto vulnerable to sender of encrypted events being spoofed by homeserver administrator CVE-2024-52813Mediummatrix-sdk-crypto: matrix-sdk-crypto missing facility to signal rotation of a verified cryptographic identity CVE-2024-40648Mediummatrix-sdk-crypto: matrix-sdk-crypto's `UserIdentity::is_verified` not checking verification status of own user identity while performing the check CVE-2024-34353Mediummatrix-sdk-crypto: matrix-sdk-crypto contains a log exposure of private key of the server-side key backup CVE-2022-39252Mediummatrix-sdk-crypto: matrix-sdk-crypto contains potential impersonation via room key forward responses

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo