Login Request a demo
SY
Product
synapse
by element-hq · last CVE May 28, 2026
11
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Vulnerabilities11In the news0Timeline
Severity mix
Critical 1High 3Medium 6Low 1
Severity
All severities11Critical1High3Medium6Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add synapse to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-31208
6.5
1%
Apr 23
Synapse's V2 state resolution weakness allows DoS from remote room members
Affected: < 1.105.1
CVE-2026-45078
5.5
0%
May 28
Synapse CPU starvation (Denial of Service)
Affected: < 1.152.1
CVE-2025-61672
5.3
0%
Oct 8
Synapse: Invalid device keys degrade federation functionality
Affected: < 1.138.3; = 1.139.0
CVE-2024-37303
5.3
0%
Dec 3
Synapse unauthenticated writes to the media repository allow planting of problematic content
Affected: < 1.106
CVE-2024-52815
5.3
1%
Dec 3
Synapse allows a a malformed invite to break the invitee's `/sync`
Affected: < 1.120.1
CVE-2024-53867
4.3
0%
Dec 3
Synapse Matrix has a partial room state leak via Sliding Sync
Affected: >= 1.113.0rc1, < 1.120.1
Showing 6