This repository was archived by the owner on Apr 26, 2024. It is now read-only.
Security: matrix-org/synapse
Security Advisories
View information about security vulnerabilities from this repository's maintainers.
-
IP blacklist bypass via transitional IPv6 addresses on dual-stack networksGHSA-5wrh-4jwv-5w78 published
Apr 12, 2021 by richvdhModerate -
Cross-site scripting (XSS) vulnerability in the password reset endpointGHSA-246w-56m2-5899 published
Mar 25, 2021 by clokepModerate -
Open redirects on some federation and push requestsGHSA-v936-j8gp-9q3p published
Feb 25, 2021 by clokepLow -
Denial of service attack via .well-known lookupsGHSA-2hwx-mjrm-v3g8 published
Feb 25, 2021 by clokepLow -
Denial of service attack via incorrect parameters to federation APIsGHSA-hxmp-pqch-c8mm published
Dec 9, 2020 by erikjohnstonModerate -
Denial of service attack due to invalid JSONGHSA-4mp3-385r-v63f published
Nov 23, 2020 by callahadHigh -
Cross-site scripting (XSS) vulnerability in the fallback authentication endpointGHSA-3x8c-fmpc-5rmq published
Oct 16, 2020 by clokepModerate