https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T21:16:36.591722+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-50557 EUVD-2026-50557 2026-10-05T21:16:36.716151+00:00 EUVD-2026-50557 https://cve.radiocsirt.org/vuln/fkie_cve-2019-5885 fkie_cve-2019-5885 2026-10-05T21:16:36.716189+00:00

Matrix Synapse before 0.34.0.1, when the macaroon_secret_key authentication parameter is not set, uses a predictable value to derive a secret key and other secrets which could allow remote attackers to impersonate users.

 https://cve.radiocsirt.org/vuln/ghsa-jrqm-v8cv-53ww GHSA-jrqm-v8cv-53ww — Matrix Synapse Predictable Secret Key 2026-10-05T21:16:36.716222+00:00

Affected: PyPI: matrix-synapse

Matrix Synapse before 0.34.0.1, when the `macaroon_secret_key` authentication parameter is not set, uses a predictable value to derive a secret key and other secrets which could allow remote attackers to impersonate users.

 https://cve.radiocsirt.org/vuln/gsd-2019-5885 gsd-2019-5885 2026-10-05T21:16:36.716247+00:00 gsd-2019-5885 https://cve.radiocsirt.org/vuln/opensuse-su-2024:11041-1 openSUSE-SU-2024:11041-1 — matrix-synapse-1.43.0-1.1 on GA media 2026-10-05T21:16:36.716259+00:00

matrix-synapse-1.43.0-1.1 on GA media

 https://cve.radiocsirt.org/vuln/pysec-2019-187 PYSEC-2019-187 2026-10-05T21:16:36.716282+00:00

Affected: PyPI: matrix-synapse

Matrix Synapse before 0.34.0.1, when the macaroon_secret_key authentication parameter is not set, uses a predictable value to derive a secret key and other secrets which could allow remote attackers to impersonate users.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-5885 UBUNTU-CVE-2019-5885 2026-10-05T21:16:36.716300+00:00

Affected: Ubuntu:Pro:18.04:LTS: matrix-synapse

Matrix Synapse before 0.34.0.1, when the macaroon_secret_key authentication parameter is not set, uses a predictable value to derive a secret key and other secrets which could allow remote attackers to impersonate users.