Medium
CVE-2025-61672
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 45
Reset filters
High
CVE-2025-30355
Synapse vulnerable to federation denial of service via malformed events
High
CVE-2024-52815
Synapse allows a a malformed invite to break the invitee's `/sync`
Medium
CVE-2024-53867
Synapse Matrix has a partial room state leak via Sliding Sync
High
CVE-2024-53863
Synapse can be forced to thumbnail unexpected file formats, invoking external, potentially untrustworthy decoders
High
CVE-2024-52805
Synapse allows unsupported content types to lead to memory exhaustion
High
CVE-2018-10657
Matrix Synapse DoS
High
CVE-2018-12423
Matrix Synapse Authorization Error
High
CVE-2018-16515
Matrix Synapse Improper Signature Validation
High
CVE-2018-12291
Matrix Synapse Security Filtering Flaw
Medium
CVE-2022-41952
Uncontrolled Resource Consumption in Matrix Synapse
Medium
CVE-2026-45076
Synapse pagination Denial of Service
High
CVE-2026-45078
Synapse CPU starvation (Denial of Service)
Medium
CVE-2024-37303
Synapse's unauthenticated writes to the media repository allow planting of problematic content
High
CVE-2024-37302
Synapse denial of service through media disk space consumption
Medium
CVE-2024-31208
Synapse V2 state resolution weakness allows Denial of Service (DoS)
Medium
CVE-2023-43796
Synapse vulnerable to leak of remote user device information
Medium
CVE-2023-45129
matrix-synapse vulnerable to denial of service due to malicious server ACL events
Medium
CVE-2023-42453
matrix-synapse vulnerable to improper validation of receipts allows forged read receipts
Low
CVE-2023-41335
matrix-synapse vulnerable to temporary storage of plaintext passwords during password changes
Medium
CVE-2023-32683
Synapse has URL deny list bypass via oEmbed and image URLs when generating previews
Medium
CVE-2023-32682
Synapse has improper checks for deactivated users during login
Medium
CVE-2023-32323
Synapse Outgoing federation to specific hosts can be disabled by sending malicious invites
High
CVE-2022-39374
Synapse Denial of service due to incorrect application of event authorization rules during state resolution
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.