{"id":"EUVD-2025-0042","revision":"7eebe86b5fe44b6693c504a0e094d837","records":[{"revision":"7eebe86b5fe44b6693c504a0e094d837","observedAt":"2026-11-09T01:09:58.022+00:00","statement":{"source":"euvd","id":"EUVD-2025-0042","aliases":["CVE-2024-52813","GHSA-r5vf-wf4h-82gg"],"title":"matrix-rust-sdk is an implementation of a Matrix client-server library in Rust. Versions of the matrix-sdk-crypto Rust crate before 0.8.0 lack a dedicated mechanism to notify that a user's cryptographic identity has changed from a verified …","description":"matrix-rust-sdk is an implementation of a Matrix client-server library in Rust. Versions of the matrix-sdk-crypto Rust crate before 0.8.0 lack a dedicated mechanism to notify that a user's cryptographic identity has changed from a verified to an unverified one, which could cause client applications relying on the SDK to overlook such changes. matrix-sdk-crypto 0.8.0 adds a new VerificationLevel::VerificationViolation enum variant which indicates that a previously verified identity has been changed.","state":0,"publishedAt":null,"modifiedAt":null,"affected":[],"metrics":[{"system":"EUVD CVSS 3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","score":4.3,"severity":null}],"references":["https://github.com/matrix-org/matrix-rust-sdk/security/advisories/GHSA-r5vf-wf4h-82gg","https://github.com/matrix-org/matrix-rust-sdk/pull/3795"],"sourceUrl":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-0042","license":"ENISA EUVD · source terms and attribution apply","enrichment":{"sourceStatus":null,"weaknesses":[],"productCriteria":[],"sourceDates":{"datePublished":"Jan 7, 2025, 3:25:47 PM","dateUpdated":"Jan 7, 2025, 5:11:35 PM"},"relatedAdvisories":[{"id":"openSUSE-SU-2025:14726-1","title":"cargo-audit-advisory-db-20250204-1.1 on GA media","vulnerabilityIds":["CVE-2024-52813"]}],"note":"EUVD source date text has no stated timezone and is retained without inventing a UTC instant. Related bulletin membership is not an alias, common cause or applicability claim. A missing vector with a zero score is treated as unrated. Complete vendor/product and underlying source evidence remains in the original JSON."},"key":"euvd:EUVD-2025-0042","identifiers":["EUVD-2025-0042","CVE-2024-52813","GHSA-r5vf-wf4h-82gg"]},"retained":false,"historicalAffected":[]}],"coverage":[]}