Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
6.5
Synapse homeserver may let attackers read or change data
published 4 days ago
Summary
The Synapse open‑source Matrix homeserver package contains a security weakness that could allow an unauthorized person to view or modify messages and user information. This could affect any organization running Synapse. Install the latest Synapse release or apply the vendor’s security patch as soon as possible.
What to do
- Update cleanstart synapse to version 1.105.1-r0.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| CleanStart | cleanstart | synapse |
< 1.105.1-r0 Fix: upgrade to 1.105.1-r0
|
Original advisory text
Synapse is an open-source Matrix homeserver
Security vulnerability affects the synapse package. Synapse is an open-source Matrix homeserver.
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker partial control (estimated)
Timeline
Published31 Oct 2026
Updated31 Oct 2026
First seen31 Oct 2026
Sources
CLEANSTART-2024-IS45865 · OSV
Track software like this
Free during beta