TI-2025-21661 CVE-2025-30355 · GHSA-v56r-hwv5-mxg6
Synapse vulnerable to federation denial of service via malformed events
Priority LOW 35
Synapse is an open source Matrix homeserver implementation.
Vulnerabilities
40 records
TI-2024-24815 CVE-2024-37303 · GHSA-gjgr-7834-rhxr
Synapse unauthenticated writes to the media repository allow planting of problematic content
Priority LOW 30
Synapse is an open-source Matrix homeserver.
TI-2024-24814 CVE-2024-37302 · GHSA-4mhg-xv73-xq2x
Synapse denial of service through media disk space consumption
Priority MEDIUM 40
Synapse is an open-source Matrix homeserver.
TI-2024-35318 CVE-2024-52805 · GHSA-rfq8-j7rh-8hf2
Synapse allows unsupported content types to lead to memory exhaustion
Priority MEDIUM 43
Synapse is an open-source Matrix homeserver.
TI-2024-35327 CVE-2024-52815 · GHSA-f3r3-h2mq-hx2h
Synapse allows a a malformed invite to break the invitee's `/sync`
Priority MEDIUM 44
Synapse is an open-source Matrix homeserver.
TI-2024-36056 CVE-2024-53863 · GHSA-vp6v-whfm-rv3g
Synapse can be forced to thumbnail unexpected file formats, invoking external, potentially untrustworthy decoders
Priority MEDIUM 43
Synapse is an open-source Matrix homeserver.
TI-2024-20585 CVE-2024-31208 · GHSA-3h7q-rfh9-xm4v
Synapse's V2 state resolution weakness allows DoS from remote room members
Priority LOW 32
Synapse is an open-source Matrix homeserver.
TI-2023-23487 CVE-2023-43796 · GHSA-mp92-3jfm-3575
Synapse vulnerable to leak of remote user device information
Priority LOW 26
Synapse is an open-source Matrix homeserver Prior to versions 1.95.1 and 1.96.0rc1, cached device information of remote users can be queried from Synapse.
TI-2023-24150 CVE-2023-45129 · GHSA-5chr-wjw5-3gq4
matrix-synapse vulnerable to denial of service due to malicious server ACL events
Priority LOW 25
Synapse is an open-source Matrix homeserver written and maintained by the Matrix.org Foundation.
TI-2023-21935 CVE-2023-41335 · GHSA-4f74-84v3-j9q5
Temporary storage of plaintext passwords during password changes in matrix synapse
Priority LOW 18
Synapse is an open-source Matrix homeserver written and maintained by the Matrix.org Foundation.
TI-2023-22618 CVE-2023-42453 · GHSA-7565-cq32-vx2x
Improper validation of receipts allows forged read receipts in matrix synapse
Priority LOW 21
Synapse is an open-source Matrix homeserver written and maintained by the Matrix.org Foundation.
TI-2023-15959 CVE-2023-32683 · GHSA-98px-6486-j7qc
URL deny list bypass via oEmbed and image URLs when generating previews in Synapse
Priority LOW 25
Synapse is a Matrix protocol homeserver written in Python with the Twisted framework.
TI-2023-15958 CVE-2023-32682 · GHSA-26c5-ppr8-f33p
Improper checks for deactivated users during login in synapse
Priority LOW 26
Synapse is a Matrix protocol homeserver written in Python with the Twisted framework.
TI-2022-18748 CVE-2022-39374 · GHSA-p9qp-c452-f9r7
Synapse Denial of service due to incorrect application of event authorization rules during state resolution
Priority LOW 31
Synapse is an open-source Matrix homeserver written and maintained by the Matrix.org Foundation.
TI-2022-18711 CVE-2022-39335 · GHSA-45cj-f97f-ggwv
Synapse does not apply enough checks to servers requesting auth events of events in a room
Priority LOW 24
Synapse is an open-source Matrix homeserver written and maintained by the Matrix.org Foundation.
TI-2023-15617 CVE-2023-32323 · GHSA-f3wc-3vxv-xmvr
Synapse Outgoing federation to specific hosts can be disabled by sending malicious invites
Priority MEDIUM 56
Synapse is an open-source Matrix homeserver written and maintained by the Matrix.org Foundation.
TI-2022-20293 CVE-2022-41952 · GHSA-4822-jvwx-w47h
Uncontrolled Resource Consumption in Matrix Synapse
Priority LOW 37
Synapse before 1.52.0 with URL preview functionality enabled will attempt to generate URL previews for media stream URLs without properly limiting connection time.
TI-2022-13195 CVE-2022-31152 · GHSA-jhjh-776m-4765
Synapse vulnerable to denial of service (DoS) due to incorrect application of event authorization rules
Priority LOW 35
Synapse is an open-source Matrix homeserver written and maintained by the Matrix.org Foundation.
TI-2022-13097 CVE-2022-31052 · GHSA-22p3-qrh9-cx32
URL previews can crash Synapse media repositories or Synapse monoliths
Priority LOW 32
Synapse is an open source home server implementation for the Matrix chat network.
TI-2021-18113 CVE-2021-41281 · GHSA-3hfw-x7gx-437c
Path traversal in Matrix Synapse
Priority LOW 36
Synapse is a package for Matrix homeservers written in Python 3/Twisted.
TI-2021-16550 CVE-2021-39164 · GHSA-3x4c-pq33-4w3q
Improper authorisation of /members discloses room membership to non-members
Priority LOW 18
Matrix is an ecosystem for open federated Instant Messaging and Voice over IP.
TI-2021-16549 CVE-2021-39163 · GHSA-jj53-8fmw-f2w2
Adding a private/unlisted room to a community exposes room metadata in an unauthorised manner.
Priority LOW 17
Matrix is an ecosystem for open federated Instant Messaging and Voice over IP.
TI-2021-10184 CVE-2021-29471 · GHSA-x345-32rc-8h85
Denial of service in Matrix Synapse
Priority LOW 27
Synapse is a Matrix reference homeserver written in python (pypi package matrix-synapse).
TI-2021-04491 CVE-2021-21392 · GHSA-5wrh-4jwv-5w78
Open redirect via transitional IPv6 addresses on dual-stack networks
Priority LOW 30
Synapse is a Matrix reference homeserver written in python (pypi package matrix-synapse).
TI-2021-04492 CVE-2021-21393 · GHSA-jrh7-mhhx-6h88
Denial of service (via resource exhaustion) due to improper input validation on groups/communities endpoints
Priority LOW 32
Synapse is a Matrix reference homeserver written in python (pypi package matrix-synapse).