matrix-synapse vulnerabilities (PyPI)
45 vulnerabilities.
-
matrix-synapsePyPI Synapse pagination denial of service 5.1 Medium -
matrix-synapsePyPI Synapse CPU starvation (Denial of Service) 6.8 Medium -
matrix-synapsePyPI Synapse: Invalid device keys degrade federation functionality 5.3 Medium -
matrix-synapsePyPI Synapse vulnerable to federation denial of service via malformed events 7.1 High -
matrix-synapsePyPI Synapse unauthenticated writes to the media repository allow planting of problematic content 5.3 Medium -
matrix-synapsePyPI Synapse denial of service through media disk space consumption 7.5 High -
matrix-synapsePyPI Synapse allows unsupported content types to lead to memory exhaustion 8.2 High -
matrix-synapsePyPI Synapse allows a a malformed invite to break the invitee's `/sync` 8.7 High -
matrix-synapsePyPI Synapse Matrix has a partial room state leak via Sliding Sync 4.3 Medium -
matrix-synapsePyPI Synapse can be forced to thumbnail unexpected file formats, invoking external, potentially untrustworthy decoders 8.2 High -
matrix-synapsePyPI Synapse's V2 state resolution weakness allows DoS from remote room members 6.5 Medium -
matrix-synapsePyPI Synapse vulnerable to leak of remote user device information 5.3 Medium -
matrix-synapsePyPI matrix-synapse vulnerable to denial of service due to malicious server ACL events 4.9 Medium -
matrix-synapsePyPI Improper validation of receipts allows forged read receipts in matrix synapse 3.1 Low -
matrix-synapsePyPI Temporary storage of plaintext passwords during password changes in matrix synapse 3.7 Low -
matrix-synapsePyPI URL deny list bypass via oEmbed and image URLs when generating previews in Synapse 3.5 Low -
matrix-synapsePyPI Improper checks for deactivated users during login in synapse 5.4 Medium -
matrix-synapsePyPI Synapse Outgoing federation to specific hosts can be disabled by sending malicious invites 5.0 Medium -
matrix-synapsePyPI Synapse Denial of service due to incorrect application of event authorization rules during state resolution 6.5 Medium -
matrix-synapsePyPI Synapse does not apply enough checks to servers requesting auth events of events in a room 5.0 Medium -
matrix-synapsePyPI Synapse vulnerable to denial of service (DoS) due to incorrect application of event authorization rules 6.4 Medium -
matrix-synapsePyPI URL previews can crash Synapse media repositories or Synapse monoliths 6.5 Medium -
matrix-synapsePyPI Uncontrolled Resource Consumption in Matrix Synapse 6.5 Medium -
matrix-synapsePyPI Path traversal in Matrix Synapse 7.5 High -
matrix-synapsePyPI Improper authorisation of /members discloses room membership to non-members 3.1 Low -
matrix-synapsePyPI Adding a private/unlisted room to a community exposes room metadata in an unauthorised manner. 3.1 Low -
matrix-synapsePyPI Denial of service (via resource exhaustion) due to improper input validation in third-party identifier endpoint No score -
matrix-synapsePyPI Denial of service in Matrix Synapse 3.7 Low -
matrix-synapsePyPI Open redirect via transitional IPv6 addresses on dual-stack networks 6.3 Medium -
matrix-synapsePyPI Denial of service (via resource exhaustion) due to improper input validation on groups/communities endpoints 5.3 Medium -
matrix-synapsePyPI Denial of service (via resource exhaustion) due to improper input validation on third-party identifier endpoints 5.3 Medium -
matrix-synapsePyPI HTML injection in email and account expiry notifications 6.1 Medium -
matrix-synapsePyPI Cross-site scripting (XSS) vulnerability in the password reset endpoint 6.9 Medium -
matrix-synapsePyPI Open redirects on some federation and push requests 3.1 Low -
matrix-synapsePyPI Denial of service attack via .well-known lookups 4.3 Medium -
matrix-synapsePyPI Denial of service attack via incorrect parameters to federation APIs 6.5 Medium -
matrix-synapsePyPI Denial of service attack due to invalid JSON 7.5 High -
matrix-synapsePyPI Cross-site scripting (XSS) vulnerability in the fallback authentication endpoint 6.1 Medium -
matrix-synapsePyPI Improper Verification of Cryptographic Signature in matrix-synapse 9.8 Critical -
matrix-synapsePyPI matrix-sydent and matrix-synapse Use Cryptographically Weak PRNG 7.5 High -
matrix-synapsePyPI Matrix Synapse Predictable Secret Key 7.5 High -
matrix-synapsePyPI Matrix Synapse Improper Signature Validation 8.8 High -
matrix-synapsePyPI Matrix Synapse Authorization Error 7.5 High -
matrix-synapsePyPI Matrix Synapse Security Filtering Flaw 7.5 High -
matrix-synapsePyPI Matrix Synapse DoS 7.5 High