Lucene search
+L

1 matches found

PyPA
PyPA
added 2026/07/07 4:03 p.m.23 views

Synapse's invalid device keys degrade federation functionality

ImpactLack of validation for device keys in Synapse before 1.138.3 and in Synapse 1.139.0 allow an attacker registered on the victim homeserver to degrade federation functionality, unpredictably breaking outbound federation to other homeservers. PatchesPatched in Synapse 1.138.3, 1.138.4, 1.139.1...

5.3CVSS5.9AI score0.00466EPSS
SaveExploits0References12Affected Software1
Rows per page
Query Builder