SY
Product
synapse
10
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Severity mix
Critical 1High 3Medium 5Low 1
Watch
Add synapse to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-53863 | 9.1 | Dec 3 | Synapse can be forced to thumbnail unexpected file formats, invoking external, potentially untrustworthy decoders Affected: < 1.120.1 |
| CVE-2025-30355 | 7.5 | Mar 27 | Synapse vulnerable to federation denial of service via malformed events Affected: < 1.127.1 |
| CVE-2024-37302 | 7.5 | Dec 3 | Synapse denial of service through media disk space consumption Affected: < 1.106 |
| CVE-2024-52805 | 7.5 | Dec 3 | Synapse allows unsupported content types to lead to memory exhaustion Affected: < 1.120.1 |
| CVE-2026-45078 | 5.5 | May 28 | Synapse CPU starvation (Denial of Service) Affected: < 1.152.1 |
| CVE-2025-61672 | 5.3 | Oct 8 | Synapse: Invalid device keys degrade federation functionality Affected: < 1.138.3; = 1.139.0 |
| CVE-2024-37303 | 5.3 | Dec 3 | Synapse unauthenticated writes to the media repository allow planting of problematic content Affected: < 1.106 |
| CVE-2024-52815 | 5.3 | Dec 3 | Synapse allows a a malformed invite to break the invitee's `/sync` Affected: < 1.120.1 |
| CVE-2024-53867 | 4.3 | Dec 3 | Synapse Matrix has a partial room state leak via Sliding Sync Affected: >= 1.113.0rc1, < 1.120.1 |
| CVE-2026-45076 | 2.7 | May 28 | Synapse pagination denial of service Affected: < 1.152.1 |
Showing 10