SY
Product
Synapse
40
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 13Medium 22Low 3
Watch
Add Synapse to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-18835 | 9.8 | Nov 8 | Matrix Synapse before 1.5.0 mishandles signature checking on some federation APIs Affected: before 1.5.0 |
| CVE-2024-53863 | 9.1 | Dec 3 | Synapse is an open-source Matrix homeserver Affected: before 1.120.1 |
| CVE-2018-16515 | 8.8 | Sep 18 | Matrix Synapse before 0.33.3.1 allows remote attackers to spoof events and possibly have unspecified other impacts by leveraging improper transaction and event signature… Affected: before 0.33.3.1 |
| CVE-2021-21332 | 8.2 | Mar 26 | Synapse is a Matrix reference homeserver written in python (pypi package matrix-synapse) Affected: before 1.27.0 |
| CVE-2025-30355 | 7.5 | Mar 27 | Synapse is an open source Matrix homeserver implementation Affected: before 1.127.1 |
| CVE-2024-52805 | 7.5 | Dec 3 | Synapse is an open-source Matrix homeserver Affected: before 1.120.1 |
| CVE-2024-37302 | 7.5 | Dec 3 | Synapse is an open-source Matrix homeserver Affected: before 1.106.0 |
| CVE-2022-31152 | 7.5 | Sep 2 | Synapse is an open-source Matrix homeserver written and maintained by the Matrix.org Foundation Affected: before 1.62.0 |
| CVE-2021-41281 | 7.5 | Nov 23 | Synapse is a package for Matrix homeservers written in Python 3/Twisted Affected: before 1.47.1 |
| CVE-2020-26890 | 7.5 | Nov 24 | Matrix Synapse before 1.20.0 erroneously permits non-standard NaN, Infinity, and -Infinity JSON values in fields of m.room.member events, allowing remote attackers to execute a… Affected: before 1.20.0 |
| CVE-2019-11842 | 7.5 | May 9 | An issue was discovered in Matrix Sydent before 1.0.3 and Synapse before 0.99.3.1 Affected: before 0.99.3.1 |
| CVE-2019-5885 | 7.5 | Mar 19 | Matrix Synapse before 0.34.0.1, when the macaroon_secret_key authentication parameter is not set, uses a predictable value to derive a secret key and other secrets which could… Affected: before 0.34.0.1 |
| CVE-2018-12423 | 7.5 | Jun 14 | In Synapse before 0.31.2, unauthorised users can hijack rooms when there is no m.room.power_levels event in force Affected: before 0.31.2 |
| CVE-2018-12291 | 7.5 | Jun 13 | The on_get_missing_events function in handlers/federation.py in Matrix Synapse before 0.31.1 has a security bug in the get_missing_events federation API where event visibility… Affected: before 0.31.1 |
| CVE-2018-10657 | 7.5 | May 2 | Matrix Synapse before 0.28.1 is prone to a denial of service flaw where malicious events injected with depth = 2^63 - 1 render rooms unusable, related to… Affected: before 0.28.1 |
| CVE-2024-31208 | 6.5 | Apr 23 | Synapse is an open-source Matrix homeserver Affected: before 1.105.1 |
| CVE-2022-39374 | 6.5 | May 26 | Synapse is an open-source Matrix homeserver written and maintained by the Matrix.org Foundation Affected: 1.62.0 before 1.68.0 |
| CVE-2022-31052 | 6.5 | Jun 28 | Synapse is an open source home server implementation for the Matrix chat network Affected: before 1.61.1 |
| CVE-2021-21393 | 6.5 | Apr 12 | Synapse is a Matrix reference homeserver written in python (pypi package matrix-synapse) Affected: after 0.24.0 before 1.28.0 |
| CVE-2021-21394 | 6.5 | Apr 12 | Synapse is a Matrix reference homeserver written in python (pypi package matrix-synapse) Affected: after 0.17.0 before 1.28.0 |
| CVE-2021-21274 | 6.5 | Feb 26 | Synapse is a Matrix reference homeserver written in python (pypi package matrix-synapse) Affected: 0.99.0 before 1.25.0 |
| CVE-2020-26257 | 6.5 | Dec 9 | Matrix is an ecosystem for open federated Instant Messaging and VoIP Affected: before 1.23.1 |
| CVE-2021-21392 | 6.3 | Apr 12 | Synapse is a Matrix reference homeserver written in python (pypi package matrix-synapse) Affected: before 1.28.0 |
| CVE-2021-21333 | 6.1 | Mar 26 | Synapse is a Matrix reference homeserver written in python (pypi package matrix-synapse) Affected: before 1.27.0 |
| CVE-2021-21273 | 6.1 | Feb 26 | Synapse is a Matrix reference homeserver written in python (pypi package matrix-synapse) Affected: before 1.25.0 |
| CVE-2020-26891 | 6.1 | Oct 19 | AuthRestServlet in Matrix Synapse before 1.21.0 is vulnerable to XSS due to unsafe interpolation of the session GET parameter Affected: before 1.21.0 |
| CVE-2023-32683 | 5.4 | Jun 6 | Synapse is a Matrix protocol homeserver written in Python with the Twisted framework Affected: before 1.85.0 |
| CVE-2023-32682 | 5.4 | Jun 6 | Synapse is a Matrix protocol homeserver written in Python with the Twisted framework Affected: before 1.85.0 |
| CVE-2024-52815 | 5.3 | Dec 3 | Synapse is an open-source Matrix homeserver Affected: before 1.120.1 |
| CVE-2024-37303 | 5.3 | Dec 3 | Synapse is an open-source Matrix homeserver Affected: before 1.106.0 |
| CVE-2023-43796 | 5.3 | Oct 31 | Synapse is an open-source Matrix homeserver Prior to versions 1.95.1 and 1.96.0rc1, cached device information of remote users can be queried from Synapse Affected: before 1.95.1 |
| CVE-2022-41952 | 5.3 | Nov 22 | Synapse before 1.52.0 with URL preview functionality enabled will attempt to generate URL previews for media stream URLs without properly limiting connection time Affected: before 1.53.0 |
| CVE-2021-29471 | 5.3 | May 11 | Synapse is a Matrix reference homeserver written in python (pypi package matrix-synapse) Affected: before 1.33.2 |
| CVE-2022-39335 | 5.0 | May 26 | Synapse is an open-source Matrix homeserver written and maintained by the Matrix.org Foundation Affected: before 1.69.0 |
| CVE-2023-45129 | 4.9 | Oct 10 | Synapse is an open-source Matrix homeserver written and maintained by the Matrix.org Foundation Affected: before 1.94.0 |
| CVE-2023-42453 | 4.3 | Sep 27 | Synapse is an open-source Matrix homeserver written and maintained by the Matrix.org Foundation Affected: 1.34.0 before 1.93.0 |
| CVE-2023-32323 | 4.3 | May 26 | Synapse is an open-source Matrix homeserver written and maintained by the Matrix.org Foundation Affected: before 1.74.0 |
| CVE-2023-41335 | 3.7 | Sep 27 | Synapse is an open-source Matrix homeserver written and maintained by the Matrix.org Foundation Affected: 1.66.0 before 1.93.0 |
| CVE-2021-39164 | 3.1 | Aug 31 | Matrix is an ecosystem for open federated Instant Messaging and Voice over IP Affected: before 1.41.1 |
| CVE-2021-39163 | 3.1 | Aug 31 | Matrix is an ecosystem for open federated Instant Messaging and Voice over IP Affected: before 1.41.1 |
Showing 40