matrix-sdk-crypto vulnerabilities (crates.io)
7 vulnerabilities.
-
matrix-sdk-cryptocrates.io Sending custom to-device messages may panics No score -
matrix-sdk-cryptocrates.io Matrix Rust SDK: Sender-binding gaps in to-device and room-key attribution 6.9 Medium -
matrix-sdk-cryptocrates.io matrix-sdk-crypto vulnerable to sender of encrypted events being spoofed by homeserver administrator 4.9 Medium -
matrix-sdk-cryptocrates.io `UserIdentity::is_verified` not checking verification status of own user identity while performing the check in matrix-rust-sdk 5.4 Medium -
matrix-sdk-cryptocrates.io matrix-sdk-crypto contains a log exposure of private key of the server-side key backup 5.5 Medium -
matrix-sdk-cryptocrates.io matrix-sdk-crypto missing facility to signal rotation of a verified cryptographic identity 4.3 Medium -
matrix-sdk-cryptocrates.io When matrix-rust-sdk recieves forwarded room keys, the reciever doesn't check if it requested the key from the forwarder 8.6 High