element-hq/synapse Security Advisories | GitStock

medium2026-05-14

Synapse pagination Denial of Service

GHSA-6qf2-7x63-mm6v · CVE-2026-45076

high2026-05-14

Synapse CPU starvation (Denial of Service)

GHSA-8q93-326v-3m7g · CVE-2026-45078

medium2025-10-08

Synapse's invalid device keys degrade federation functionality

GHSA-fh66-fcv5-jjfr · CVE-2025-61672

high2025-03-27

Synapse vulnerable to federation denial of service via malformed events

GHSA-v56r-hwv5-mxg6 · CVE-2025-30355

medium2024-12-03

Synapse Matrix has a partial room state leak via Sliding Sync

GHSA-56w4-5538-8v8h · CVE-2024-53867

high2024-12-03

Synapse can be forced to thumbnail unexpected file formats, invoking external, potentially untrustworthy decoders

GHSA-vp6v-whfm-rv3g · CVE-2024-53863

high2024-12-03

Synapse allows a a malformed invite to break the invitee's `/sync`

GHSA-f3r3-h2mq-hx2h · CVE-2024-52815

high2024-12-03

Synapse allows unsupported content types to lead to memory exhaustion

GHSA-rfq8-j7rh-8hf2 · CVE-2024-52805

medium2024-12-03

Synapse's unauthenticated writes to the media repository allow planting of problematic content

GHSA-gjgr-7834-rhxr · CVE-2024-37303

high2024-12-03

Synapse denial of service through media disk space consumption

GHSA-4mhg-xv73-xq2x · CVE-2024-37302

medium2024-04-23

Synapse V2 state resolution weakness allows Denial of Service (DoS)

GHSA-3h7q-rfh9-xm4v · CVE-2024-31208