—

RUSTSEC-2025-0000

matrix-sdk-base: Panic in the `RoomMember::normalized_power_level()` method

Details

In matrix-sdk-base before 0.14.1, calling the `RoomMember::normalized_power_level()` method can cause a panic if a room member has a power level of `Int::Min`.

Are you affected?

Enter the version of the package you're using.

Affected packages

crates.io/matrix-sdk-base

Introduced in: 0.0.0-0Fixed in: 0.14.1

Upgrade matrix-sdk-base to 0.14.1 or newer (ecosystem crates.io).

References

https://crates.io/crates/matrix-sdk-base[PACKAGE]
https://rustsec.org/advisories/RUSTSEC-2025-0000.html[ADVISORY]
https://github.com/matrix-org/matrix-rust-sdk/security/advisories/GHSA-qhj8-q5r6-8q6j[ADVISORY]