Malicious code in synapse-artifacts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a0e1e584725221a12679c41002914f98d62a8350234cecb0d4c19abe4d3b301d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in synapse-managed-private-endpoints (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e1c17bea232b736c62da3d64b16c7726920d31083e764ab22b60f313d0e757c3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in synapse-access-control (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 81115e92f8431e03d9f4916ec0eca880aba3fb98d918ca6e1aca89e0df7e9fe6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6384 Malicious code in synapse-artifacts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a0e1e584725221a12679c41002914f98d62a8350234cecb0d4c19abe4d3b301d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6382 Malicious code in synapse-access-control (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 81115e92f8431e03d9f4916ec0eca880aba3fb98d918ca6e1aca89e0df7e9fe6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6386 Malicious code in synapse-monitoring (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9522f22c758faa0d1404a496aca5bc00e6359a939c7d1dd41d5f7da218892773 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6385 Malicious code in synapse-managed-private-endpoints (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e1c17bea232b736c62da3d64b16c7726920d31083e764ab22b60f313d0e757c3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in synapse-spark (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9ab3451077741f002a7a21911063336175057ffc6c22ace4dd4d0e25026162e3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6387 Malicious code in synapse-spark (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9ab3451077741f002a7a21911063336175057ffc6c22ace4dd4d0e25026162e3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6383 Malicious code in synapse-access-control-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f2fe7cf85aedc1d04caf83a9719da4444d7ceedfb446155b24711781ebb9b8d5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in synapse-access-control-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f2fe7cf85aedc1d04caf83a9719da4444d7ceedfb446155b24711781ebb9b8d5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1385 Malicious code in azure-synapse-access-control-samples-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e9af60e8bc324de9be2c2572cf5b0b41c41572b7f9cbb0c9714dca1bf0b5ee92 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in azure-synapse-access-control-samples-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e9af60e8bc324de9be2c2572cf5b0b41c41572b7f9cbb0c9714dca1bf0b5ee92 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Update now!  Microsoft patches Follina, and many other security updates

The June 2022 Patch Tuesday may go down in history as the day that Follina got patched, but there was a host of other important updates. And not just from Microsoft. Many other software vendors follow the pattern of monthly updates set by the people in Redmond. Microsoft Microsoft released update...

Microsoft Patch Tuesday, June 2022 Edition

Microsoft on Tuesday released software updates to fix 60 security vulnerabilities in its Windows operating systems and other software, including a zero-day flaw in all supported Microsoft Office versions on all flavors of Windows thats seen active exploitation for at least two months now. On a...

GHSA-CPPW-2MF8-QPM5 Improper Verification of Cryptographic Signature in matrix-synapse

Matrix Synapse before 1.5.0 mishandles signature checking on some federation APIs. Events sent over /sendjoin, /sendleave, and /invite may not be correctly signed, or may not come from the expected servers...

matrix-sydent and matrix-synapse Use Cryptographically Weak PRNG

An issue was discovered in Matrix Sydent before 1.0.3 and Synapse before 0.99.3.1. Random number generation is mishandled, which makes it easier for attackers to predict a Sydent authentication token or a Synapse random ID...

GHSA-GWF7-VFJF-WF6X matrix-sydent and matrix-synapse Use Cryptographically Weak PRNG

An issue was discovered in Matrix Sydent before 1.0.3 and Synapse before 0.99.3.1. Random number generation is mishandled, which makes it easier for attackers to predict a Sydent authentication token or a Synapse random ID...

CVE-2021-21332

Synapse is a Matrix reference homeserver written in python pypi package matrix-synapse. Matrix is an ecosystem for open federated Instant Messaging and VoIP. In Synapse before version 1.27.0, the password reset endpoint served via Synapse was vulnerable to cross-site scripting XSS attacks. The...

CVE-2021-29471

Synapse is a Matrix reference homeserver written in python pypi package matrix-synapse. Matrix is an ecosystem for open federated Instant Messaging and VoIP. In Synapse before version 1.33.2 "Push rules" can specify conditions under which they will match, including eventmatch, which matches event...