Known vulnerabilities in Synapse 1.154.0

Vendor: Matrix.org
Software: Synapse
Version: 1.154.0
Software CPE: cpe:2.3:a:matrix_org:synapse:*:*:*:*:*:*:*:*
Total vulnerabilities: 11
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Synapse version 1.154.0 Synapse 1.154.0 is affected by 11 vulnerabilities: 5 medium, 6 low Critical High Medium Low

Vulnerabilities (11)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU139996 - Improper Access Control
CWE-284 Low
No
No
1.157.2 29.07.2026 SB2026072952
#VU139994 - Improper Access Control
CWE-284 Low
No
No
1.157.2 29.07.2026 SB2026072952
#VU139993 - Insufficient Verification of Data Authenticity
CWE-345 Medium
No
No
1.157.2 29.07.2026 SB2026072952
#VU139992 - Resource exhaustion
CWE-400 Low
No
No
1.157.2 29.07.2026 SB2026072952
#VU139991 - Improper Access Control
CWE-284 Low
No
No
1.157.2 29.07.2026 SB2026072952
#VU139990 - Improper Access Control
CWE-284 Medium
No
No
1.157.2 29.07.2026 SB2026072952
#VU139989 - Improper Handling of Exceptional Conditions
CWE-755 Medium
No
No
1.157.2 29.07.2026 SB2026072952
#VU139988 - Improper input validation
CWE-20 Low
No
No
1.157.2 29.07.2026 SB2026072952
#VU139987 - Improper input validation
CWE-20 Medium
No
No
1.157.2 29.07.2026 SB2026072952
#VU139986 - Improper input validation
CWE-20 Medium
No
No
1.157.2 29.07.2026 SB2026072952
#VU139985 - Improper Access Control
CWE-284 Low
No
No
1.157.2 29.07.2026 SB2026072952