{"id":"CVE-2025-53549","aliases":["RUSTSEC-2025-0043","GHSA-275g-g844-73jh"],"title":"matrix-sdk-sqlite: SQL injection vulnerability in `SqliteEventCacheStore::find_event_with_relations`","summary":"matrix-sdk-sqlite: SQL injection vulnerability in `SqliteEventCacheStore::find_event_with_relations`","severity":"none","vendor":"matrix-sdk-sqlite","product":"matrix-sdk-sqlite","ecosystem":"rust","affected":["matrix-sdk-sqlite >= 0.11.0, < 0.13.0"],"patched":["matrix-sdk-sqlite 0.13.0"],"published":"2025-07-11","updated":"2026-10-12","sourceUpdated":"2026-10-12T18:00:10.950538086Z","source":"OSV","sourceUrl":"https://osv.dev/vulnerability/RUSTSEC-2025-0043","references":[{"url":"https://crates.io/crates/matrix-sdk-sqlite"},{"url":"https://rustsec.org/advisories/RUSTSEC-2025-0043.html"},{"url":"https://github.com/matrix-org/matrix-rust-sdk/pull/4849"}],"tags":["osv","rust"],"epss":0.0031,"epssPercentile":0.22059,"ingestedAt":"2026-10-13T11:45:30.178Z","slug":"CVE-2025-53549","body":"## Overview\n\nThe `SqliteEventCacheStore::find_event_with_relations` function constructs SQL\nqueries using `format!()` with unescaped input, allowing an attacker to inject\narbitrary SQL. This results in a SQL injection vulnerability.\n\n## Affected packages\n\n- `matrix-sdk-sqlite >= 0.11.0, < 0.13.0`\n\n## Remediation\n\nUpgrade to a patched release:\n\n- `matrix-sdk-sqlite 0.13.0`","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}