Login Request a demo
SY
Product
synapse
by matrix-org · last CVE Oct 31, 2023
13
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Vulnerabilities13In the news0Timeline
Severity mix
Critical 0High 2Medium 10Low 1
Severity
All severities13Critical0High2Medium10Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add synapse to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2022-39374
6.5
1%
May 26
Synapse Denial of service due to incorrect application of event authorization rules during state resolution
Affected: >= 1.62.0, < 1.68.0
CVE-2022-31052
6.5
2%
Jun 28
URL previews can crash Synapse media repositories or Synapse monoliths
Affected: < 1.61.1
CVE-2023-32683
5.4
1%
Jun 6
URL deny list bypass via oEmbed and image URLs when generating previews in Synapse
Affected: < 1.85.0
CVE-2023-32682
5.4
1%
Jun 6
Improper checks for deactivated users during login in synapse
Affected: < 1.85.0
CVE-2023-43796
5.3
1%
Oct 31
Synapse vulnerable to leak of remote user device information
Affected: < 1.95.1
CVE-2022-41952
5.3
1%
Nov 22
Uncontrolled Resource Consumption in Matrix Synapse
Affected: < 1.53.0
CVE-2022-39335
5.0
1%
May 26
Synapse does not apply enough checks to servers requesting auth events of events in a room
Affected: < 1.69.0
CVE-2023-45129
4.9
1%
Oct 10
matrix-synapse vulnerable to denial of service due to malicious server ACL events
Affected: < 1.94.0
CVE-2023-42453
4.3
1%
Sep 26
Improper validation of receipts allows forged read receipts in matrix synapse
Affected: >= 0.34.0, < 1.93.0
CVE-2023-32323
4.3
1%
May 26
Synapse Outgoing federation to specific hosts can be disabled by sending malicious invites
Affected: < 1.74.0
Showing 10