CVE-2026-45076

A flaw was found in Synapse, an open source Matrix homeserver implementation. A remote attacker, specifically a malicious homeserver, can craft room events in federated rooms to prevent Synapse from providing full history to paginating clients. This leads to a denial of service, where clients fai...

CVE-2026-45076 Synapse pagination denial of service

Synapse is an open source Matrix homeserver implementation. Prior to 1.152.1, in federated rooms, malicious homeservers can craft room events in such a way that prevents Synapse from providing full history to paginating clients. Clients could therefore fail to display room history. This...

synapse 输入验证错误漏洞

Synapse is an open-source matrix main server developed by Element. Versions prior to 1.152.1 of Synapse contained a vulnerability related to input validation errors. This vulnerability allowed malicious servers to manipulate room events, thereby preventing the complete history from being provided...