Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2025/10/08 5:51 p.m.10 views

Synapse's invalid device keys degrade federation functionality

Impact Lack of validation for device keys in Synapse before 1.138.3 and in Synapse 1.139.0 allow an attacker registered on the victim homeserver to degrade federation functionality, unpredictably breaking outbound federation to other homeservers. Patches Patched in Synapse 1.138.3, 1.138.4,...

5.3CVSS7AI score0.00434EPSS
SaveExploits0References10Affected Software1
Rows per page
Query Builder