matrix-sdk-base has panic in the `RoomMember::normalized_power_level()` method

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2025-59047 · Microsoft / collected KEV context

EUVD-2025-28979

GHSA-qhj8-q5r6-8q6j

RUSTSEC-2025-0000

RUSTSEC-2025-0065

cve-program · CVE-2025-59047

• https://github.com/matrix-org/matrix-rust-sdk/security/advisories/GHSA-qhj8-q5r6-8q6j
• https://github.com/matrix-org/matrix-rust-sdk/pull/5635
• https://github.com/matrix-org/matrix-rust-sdk/commit/ce3b67f801446387972ff120e907ca828a9f1207
• https://github.com/matrix-org/matrix-rust-sdk/releases/tag/matrix-sdk-base-0.14.1

euvd · EUVD-2025-28979

• https://github.com/matrix-org/matrix-rust-sdk/security/advisories/GHSA-qhj8-q5r6-8q6j
• https://github.com/matrix-org/matrix-rust-sdk/pull/5635
• https://github.com/matrix-org/matrix-rust-sdk/commit/ce3b67f801446387972ff120e907ca828a9f1207
• https://github.com/matrix-org/matrix-rust-sdk/releases/tag/matrix-sdk-base-0.14.1

nvd · CVE-2025-59047

• https://github.com/matrix-org/matrix-rust-sdk/commit/ce3b67f801446387972ff120e907ca828a9f1207
• https://github.com/matrix-org/matrix-rust-sdk/pull/5635
• https://github.com/matrix-org/matrix-rust-sdk/releases/tag/matrix-sdk-base-0.14.1
• https://github.com/matrix-org/matrix-rust-sdk/security/advisories/GHSA-qhj8-q5r6-8q6j

osv · GHSA-qhj8-q5r6-8q6j

• https://github.com/matrix-org/matrix-rust-sdk/security/advisories/GHSA-qhj8-q5r6-8q6j
• https://nvd.nist.gov/vuln/detail/CVE-2025-59047
• https://github.com/matrix-org/matrix-rust-sdk/pull/5635
• https://github.com/matrix-org/matrix-rust-sdk/commit/ce3b67f801446387972ff120e907ca828a9f1207
• https://github.com/matrix-org/matrix-rust-sdk
• https://github.com/matrix-org/matrix-rust-sdk/releases/tag/matrix-sdk-base-0.14.1
• https://rustsec.org/advisories/RUSTSEC-2025-0065.html

osv · RUSTSEC-2025-0000

• https://crates.io/crates/matrix-sdk-base
• https://rustsec.org/advisories/RUSTSEC-2025-0000.html
• https://github.com/matrix-org/matrix-rust-sdk/security/advisories/GHSA-qhj8-q5r6-8q6j

osv · RUSTSEC-2025-0065

• https://crates.io/crates/matrix-sdk-base
• https://rustsec.org/advisories/RUSTSEC-2025-0065.html
• https://github.com/matrix-org/matrix-rust-sdk/pull/5635

No related operational record is retained in the current change model.