matrix-sdk-base (crates.io) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the crates.io package matrix-sdk-base, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (2)

• CVE-2025-66622 — CVSS 7.5 (high): matrix-sdk-base is the base component to build a Matrix client library. Versions 0.14.1 and prior are unable to handle responses that…
• CVE-2025-59047: matrix-sdk-base is the base component to build a Matrix client library. In matrix-sdk-base before 0.14.1, calling the…