https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 08:41:50 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-262938 EUVD-2026-262938 https://cve.radiocsirt.org/vuln/euvd-2026-262938 https://cve.radiocsirt.org/vuln/fkie_cve-2025-66622 <p>matrix-sdk-base is the base component to build a Matrix client library. Versions 0.14.1 and prior are unable to handle responses that include custom m.room.join_rules values due to a serialization bug. This can be exploited to cause a denial-of-service condition, if a user is invited to a room with non-standard join rules, the crate&#39;s sync process will stall, preventing further processing for all rooms. This is fixed in version 0.16.0.</p> <p>matrix-sdk-base is the base component to build a Matrix client library. Versions 0.14.1 and prior are unable to handle responses that include custom m.room.join_rules values due to a serialization bug. This can be exploited to cause a denial-of-service condition, if a user is invited to a room with non-standard join rules, the crate&#39;s sync process will stall, preventing further processing for all rooms. This is fixed in version 0.16.0.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-66622 https://cve.radiocsirt.org/vuln/ghsa-jj6p-3m75-g2p3 <p><strong>Affected:</strong> crates.io: matrix-sdk-base</p> <p>The matrix-sdk-base crate is unable to handle responses that include custom m.room.join_rules values due to a serialization bug.</p> <p>This can be exploited to cause a denial-of-service condition, if a user is invited to a room with non-standard join rules, the crate&#39;s sync process will stall, preventing further processing for all rooms.</p> <p>### Patches The issue is fixed in matrix-sdk-base 0.16.0.</p> <p>### Workarounds</p> <p>Users can leave affected rooms on another client to mitigate the issue.</p> <p>### References</p> <p>The issue was fixed in https://github.com/matrix-org/matrix-rust-sdk/pull/5924.</p> <p><strong>Affected:</strong> crates.io: matrix-sdk-base</p> <p>The matrix-sdk-base crate is unable to handle responses that include custom m.room.join_rules values due to a serialization bug.</p> <p>This can be exploited to cause a denial-of-service condition, if a user is invited to a room with non-standard join rules, the crate&#39;s sync process will stall, preventing further processing for all rooms.</p> <p>### Patches The issue is fixed in matrix-sdk-base 0.16.0.</p> <p>### Workarounds</p> <p>Users can leave affected rooms on another client to mitigate the issue.</p> <p>### References</p> <p>The issue was fixed in https://github.com/matrix-org/matrix-rust-sdk/pull/5924.</p> https://cve.radiocsirt.org/vuln/ghsa-jj6p-3m75-g2p3 https://cve.radiocsirt.org/vuln/rustsec-2025-0135 <p><strong>Affected:</strong> crates.io: matrix-sdk-base</p> <p>The matrix-sdk-base crate is unable to handle responses that include custom m.room.join_rules values due to a serialization bug.</p> <p>This can be exploited to cause a denial-of-service condition, if a user is invited to a room with non-standard join rules, the crate&#39;s sync process will stall, preventing further processing for all rooms.</p> <p><strong>Affected:</strong> crates.io: matrix-sdk-base</p> <p>The matrix-sdk-base crate is unable to handle responses that include custom m.room.join_rules values due to a serialization bug.</p> <p>This can be exploited to cause a denial-of-service condition, if a user is invited to a room with non-standard join rules, the crate&#39;s sync process will stall, preventing further processing for all rooms.</p> https://cve.radiocsirt.org/vuln/rustsec-2025-0135