https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-17T09:56:33.492513+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2023-07183 bdu:2023-07183 2026-10-17T09:56:33.497243+00:00 bdu:2023-07183 https://cve.radiocsirt.org/vuln/euvd-2026-216876 EUVD-2026-216876 2026-10-17T09:56:33.497276+00:00 EUVD-2026-216876 https://cve.radiocsirt.org/vuln/fkie_cve-2023-45129 fkie_cve-2023-45129 2026-10-17T09:56:33.497291+00:00

Synapse is an open-source Matrix homeserver written and maintained by the Matrix.org Foundation. Prior to version 1.94.0, a malicious server ACL event can impact performance temporarily or permanently leading to a persistent denial of service. Homeservers running on a closed federation (which presumably do not need to use server ACLs) are not affected. Server administrators are advised to upgrade to Synapse 1.94.0 or later. As a workaround, rooms with malicious server ACL events can be purged and blocked using the admin API.

 https://cve.radiocsirt.org/vuln/ghsa-5chr-wjw5-3gq4 GHSA-5chr-wjw5-3gq4 — matrix-synapse vulnerable to denial of service due to malicious server ACL events 2026-10-17T09:56:33.497320+00:00

Affected: PyPI: matrix-synapse

### Impact A malicious server ACL event can impact performance temporarily or permanently leading to a persistent denial of service.

Homeservers running on a closed federation (which presumably do not need to use server ACLs) are not affected.

### Patches Server administrators are advised to upgrade to Synapse 1.94.0 or later.

### Workarounds Rooms with malicious server ACL events can be [purged and blocked](https://matrix-org.github.io/synapse/latest/admin_api/rooms.html#version-2-new-version) using the admin API.

 https://cve.radiocsirt.org/vuln/gsd-2023-45129 gsd-2023-45129 2026-10-17T09:56:33.497347+00:00 gsd-2023-45129 https://cve.radiocsirt.org/vuln/opensuse-su-2024:13320-1 openSUSE-SU-2024:13320-1 — matrix-synapse-1.94.0-2.1 on GA media 2026-10-17T09:56:33.497359+00:00

matrix-synapse-1.94.0-2.1 on GA media

 https://cve.radiocsirt.org/vuln/pysec-2023-199 PYSEC-2023-199 2026-10-17T09:56:33.497375+00:00

Affected: PyPI: matrix-synapse

Synapse is an open-source Matrix homeserver written and maintained by the Matrix.org Foundation. Prior to version 1.94.0, a malicious server ACL event can impact performance temporarily or permanently leading to a persistent denial of service. Homeservers running on a closed federation (which presumably do not need to use server ACLs) are not affected. Server administrators are advised to upgrade to Synapse 1.94.0 or later. As a workaround, rooms with malicious server ACL events can be purged and blocked using the admin API.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-45129 UBUNTU-CVE-2023-45129 2026-10-17T09:56:33.497394+00:00

Affected: Ubuntu:Pro:18.04:LTS: matrix-synapse, Ubuntu:Pro:20.04:LTS: matrix-synapse, Ubuntu:22.04:LTS: matrix-synapse

Synapse is an open-source Matrix homeserver written and maintained by the Matrix.org Foundation. Prior to version 1.94.0, a malicious server ACL event can impact performance temporarily or permanently leading to a persistent denial of service. Homeservers running on a closed federation (which presumably do not need to use server ACLs) are not affected. Server administrators are advised to upgrade to Synapse 1.94.0 or later. As a workaround, rooms with malicious server ACL events can be purged and blocked using the admin API.