Vulnerability RUSTSEC-2025-0043
Unknown
UNKNOWN RISK
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
1 year ago
July 11, 2025 at 12:00 PM UTC
matrix-sdk-sqlite: SQL injection vulnerability in `SqliteEventCacheStore::find_event_with_relations`
0.11.0 - 0.12.0
0.11.0 - 0.12.0
Summary
matrix-sdk-sqlite: SQL injection vulnerability in `SqliteEventCacheStore::find_event_with_relations`
Details
The SqliteEventCacheStore::find_event_with_relations function constructs SQL queries using format!() with unescaped input, allowing an attacker to inject arbitrary SQL. This results in a SQL injection vulnerability.
Related Vulnerabilities
Other vulnerabilities affecting the same packages
Impacted packages
Timeline
Published
1 year ago
July 11, 2025 at 12:00 PM UTC
Fixed (0.13.0)
1 year ago
July 10, 2025 at 01:20 PM UTC
Last Modified
1 hour ago
October 12, 2026 at 06:00 PM UTC