Known vulnerabilities in Synapse

Vendor: Matrix.org
Software: Synapse
Software CPE: cpe:2.3:a:matrix_org:synapse:*:*:*:*:*:*:*:*
Total vulnerabilities: 63
Public exploits: 2
Known exploited (KEV): 3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Synapse Synapse is affected by 63 known vulnerabilities: 1 critical, 4 high, 31 medium, 26 low Critical High Medium Low

Vulnerabilities (63)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU139996 - Improper Access Control
CWE-284 Low
No
No
1.157.2 29.07.2026 SB2026072952
#VU139994 - Improper Access Control
CWE-284 Low
No
No
1.157.2 29.07.2026 SB2026072952
#VU139993 - Insufficient Verification of Data Authenticity
CWE-345 Medium
No
No
1.157.2 29.07.2026 SB2026072952
#VU139992 - Resource exhaustion
CWE-400 Low
No
No
1.157.2 29.07.2026 SB2026072952
#VU139991 - Improper Access Control
CWE-284 Low
No
No
1.157.2 29.07.2026 SB2026072952
#VU139990 - Improper Access Control
CWE-284 Medium
No
No
1.157.2 29.07.2026 SB2026072952
#VU139989 - Improper Handling of Exceptional Conditions
CWE-755 Medium
No
No
1.157.2 29.07.2026 SB2026072952
#VU139988 - Improper input validation
CWE-20 Low
No
No
1.157.2 29.07.2026 SB2026072952
#VU139987 - Improper input validation
CWE-20 Medium
No
No
1.157.2 29.07.2026 SB2026072952
#VU139986 - Improper input validation
CWE-20 Medium
No
No
1.157.2 29.07.2026 SB2026072952
#VU139985 - Improper Access Control
CWE-284 Low
No
No
1.157.2 29.07.2026 SB2026072952
#VU131158 - Improper Check for Unusual or Exceptional Conditions
CVE-2026-45076
CWE-754 Low
No
No
1.152.1 12.05.2026 SB2026051262
#VU131157 - Resource exhaustion
CVE-2026-45078
CWE-400 Low
No
No
1.152.1 12.05.2026 SB2026051262
#VU129610 - Improper Access Control
CVE-2023-43796
CWE-284 Medium
No
No
1.95.1, 1.96.0 31.10.2023 SB20231031124
SB2024010704
SB2023110195
and 1 more
#VU129609 - Improper input validation
CVE-2023-45129
CWE-20 Low
No
No
1.94.0 10.10.2023 SB20231010105
SB2024010704
SB20231011104
and 2 more
#VU129605 - Improper input validation
CVE-2023-32323
CWE-20 Low
No
No
1.74.0 24.05.2023 SB2023052450
SB2023090940
#VU129606 - Incorrect Authorization
CVE-2022-39374
CWE-863 Low
No
No
1.68.0 24.05.2023 SB2023052449
SB2023090940
#VU129601 - Improper input validation
CWE-20 Medium
No
No
1.33.0 11.05.2021 SB2021051175
#VU49037 - Resource exhaustion
CVE-2020-26257
CWE-400 Medium
No
No
1.23.1 16.12.2020 SB2020121621
SB2020121032
SB2020121033
and 1 more
#VU47739 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-26891
CWE-79 Low
No
No
1.21.0 19.10.2020 SB2020102036
SB2020110308
SB2020101618


Showing elements 1 - 20 out of 63