{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/87919?format=json","vulnerability_id":"VCID-rnq8-phbu-w7ee","summary":"The Matrix specification before 1.16 (i.e., with a room version before 12) lacks create event uniqueness.","aliases":[{"alias":"CVE-2025-54315"}],"fixed_packages":[],"affected_packages":[],"references":[{"reference_url":"https://matrix.org/blog/2025/08/project-hydra-improving-state-res/","reference_id":"project-hydra-improving-state-res","reference_type":"","scores":[{"value":"7.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-10-02T19:32:58Z/"}],"url":"https://matrix.org/blog/2025/08/project-hydra-improving-state-res/"},{"reference_url":"https://github.com/matrix-org/matrix-spec/releases/tag/v1.16","reference_id":"v1.16","reference_type":"","scores":[{"value":"7.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-10-02T19:32:58Z/"}],"url":"https://github.com/matrix-org/matrix-spec/releases/tag/v1.16"}],"weaknesses":[{"cwe_id":837,"name":"Improper Enforcement of a Single, Unique Action","description":"The product requires that an actor should only be able to perform an action once, or to have only one unique action, but the product does not enforce or improperly enforces this restriction."}],"exploits":[],"severity_range_score":"7.1 - 7.1","exploitability":null,"weighted_severity":null,"risk_score":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-rnq8-phbu-w7ee"}