Security
فارسی
All products

matrix-synapse

PyPI · Package
45 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Synapse CPU starvation (Denial of Service)CVE-2026-45078 · GHSA-8Q93-326V-3M7GVersion ranges need review. matrix-synapse PyPI High Fix reported
Synapse pagination Denial of ServiceCVE-2026-45076 · GHSA-6QF2-7X63-MM6VVersion ranges need review. matrix-synapse PyPI Medium Fix reported
Synapse V2 state resolution weakness allows Denial of Service (DoS)CVE-2024-31208 · GHSA-3H7Q-RFH9-XM4VVersion ranges need review. matrix-synapse PyPI Medium Fix reported
matrix-synapse vulnerable to temporary storage of plaintext passwords during password changesCVE-2023-41335 · GHSA-4F74-84V3-J9Q5Version ranges need review. matrix-synapse PyPI Low Fix reported
Synapse has improper checks for deactivated users during loginCVE-2023-32682 · GHSA-26C5-PPR8-F33PVersion ranges need review. matrix-synapse PyPI Medium Fix reported
matrix-synapse vulnerable to denial of service due to malicious server ACL eventsCVE-2023-45129 · GHSA-5CHR-WJW5-3GQ4Version ranges need review. matrix-synapse PyPI Medium Fix reported
matrix-synapse vulnerable to improper validation of receipts allows forged read receiptsCVE-2023-42453 · GHSA-7565-CQ32-VX2XVersion ranges need review. matrix-synapse PyPI Medium Fix reported
Synapse vulnerable to leak of remote user device informationCVE-2023-43796 · GHSA-MP92-3JFM-3575Version ranges need review. matrix-synapse PyPI Medium Fix reported
Denial of service attack via .well-known lookupsCVE-2021-21274 · GHSA-2HWX-MJRM-V3G8Version ranges need review. matrix-synapse PyPI Medium Fix reported
Denial of service attack via incorrect parameters in Matrix SynapseCVE-2020-26257 · GHSA-HXMP-PQCH-C8MMVersion ranges need review. matrix-synapse PyPI High Fix reported
matrix-sydent and matrix-synapse Use Cryptographically Weak PRNGCVE-2019-11842 · GHSA-GWF7-VFJF-WF6XVersion ranges need review. matrix-sydentmatrix-synapse PyPI High Fix reported
Denial of service (via resource exhaustion) due to improper input validation on third-party identifier endpointsCVE-2021-21394 · GHSA-W9FG-XFFH-P362Version ranges need review. matrix-synapse PyPI Medium Fix reported
Cross-site scripting (XSS) vulnerability in the fallback authentication endpointCVE-2020-26891 · GHSA-3X8C-FMPC-5RMQVersion ranges need review. matrix-synapse PyPI Medium Fix reported
Denial of service attack due to invalid JSONCVE-2020-26890 · GHSA-4MP3-385R-V63FVersion ranges need review. matrix-synapse PyPI High Fix reported
Adding a private/unlisted room to a community exposes room metadata in an unauthorised manner.CVE-2021-39163 · GHSA-JJ53-8FMW-F2W2Version ranges need review. matrix-synapse PyPI Low Fix reported
Improper authorisation of members discloses room membership to non-membersCVE-2021-39164 · GHSA-3X4C-PQ33-4W3QVersion ranges need review. matrix-synapse PyPI Low Fix reported
Open redirect via transitional IPv6 addresses on dual-stack networksCVE-2021-21392 · GHSA-5WRH-4JWV-5W78Version ranges need review. matrix-synapse PyPI High Fix reported
Denial of service (via resource exhaustion) due to improper input validation on groups/communities endpointsCVE-2021-21393 · GHSA-JRH7-MHHX-6H88Version ranges need review. matrix-synapse PyPI Medium Fix reported
Path traversal in Matrix SynapseCVE-2021-41281 · GHSA-3HFW-X7GX-437CVersion ranges need review. matrix-synapse PyPI High Fix reported
Open redirects on some federation and push requestsCVE-2021-21273 · GHSA-V936-J8GP-9Q3PVersion ranges need review. matrix-synapse PyPI Medium Fix reported