6758 matches found
Improper Validation of Specified Type of Input
Overview matrix-synapse is an ecosystem for open federated Instant Messaging and VoIP. Affected versions of this package are vulnerable to Improper Validation of Specified Type of Input due to insufficient validation of device keys. An attacker can disrupt federation functionality and unpredictab...
CVE-2025-61672
CVE-2025-61672 affects the Synapse Matrix homeserver. The issue is caused by lack of validation for device keys in Synapse before 1.138.3 and in 1.139.0, enabling an attacker registered on the victim homeserver to degrade federation functionality and unpredictably break outbound federation to oth...
MAL-2025-48022 Malicious code in astra-db-recommendations-starter (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9f406ad9e38dd12903b516bd5bc543aee1c02d1e5641d513bf0a6d1ddb9ce7f2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
EUVD-2025-32969
Malicious code in astra-db-recommendations-starter npm...
EUVD-2021-19366
Malware in sbrugna...
EUVD-2017-11048
Malware in sbrugna...
EUVD-2019-19048
Malware in sbrugna...
EUVD-2021-19370
Malware in sbrugna...
EUVD-2020-29216
Malware in sbrugna...
EUVD-2015-3983
Malware in sbrugna...
EUVD-2021-25595
Malware in sbrugna...
EUVD-2019-5014
Malware in sbrugna...
EUVD-2021-19367
Malware in sbrugna...
EUVD-2021-25598
Malware in sbrugna...
EUVD-2021-2280
Malware in sbrugna...
EUVD-2020-29124
Malware in sbrugna...
EUVD-2020-0118
Malware in sbrugna...
PT-2025-41273
Name of the Vulnerable Software and Affected Versions Synapse versions prior to 1.138.3 Synapse version 1.139.0 Description Synapse is an open source Matrix homeserver implementation. Insufficient validation of device keys in affected versions allows an attacker registered on the victim homeserve...