https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 18 Oct 2026 13:46:00 +0000 https://cve.radiocsirt.org/vuln/cnvd-2021-15493 cnvd-2021-15493 https://cve.radiocsirt.org/vuln/cnvd-2021-15493 https://cve.radiocsirt.org/vuln/euvd-2026-22085 EUVD-2026-22085 https://cve.radiocsirt.org/vuln/euvd-2026-22085 https://cve.radiocsirt.org/vuln/fkie_cve-2021-21274 <p>Synapse is a Matrix reference homeserver written in python (pypi package matrix-synapse). Matrix is an ecosystem for open federated Instant Messaging and VoIP. In Synapse before version 1.25.0, a malicious homeserver could redirect requests to their .well-known file to a large file. This can lead to a denial of service attack where homeservers will consume significantly more resources when requesting the .well-known file of a malicious homeserver. This affects any server which accepts federation requests from untrusted servers. Issue is resolved in version 1.25.0. As a workaround the `federation_domain_whitelist` setting can be used to restrict the homeservers communicated with over federation.</p> <p>Synapse is a Matrix reference homeserver written in python (pypi package matrix-synapse). Matrix is an ecosystem for open federated Instant Messaging and VoIP. In Synapse before version 1.25.0, a malicious homeserver could redirect requests to their .well-known file to a large file. This can lead to a denial of service attack where homeservers will consume significantly more resources when requesting the .well-known file of a malicious homeserver. This affects any server which accepts federation requests from untrusted servers. Issue is resolved in version 1.25.0. As a workaround the `federation_domain_whitelist` setting can be used to restrict the homeservers communicated with over federation.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-21274 https://cve.radiocsirt.org/vuln/ghsa-2hwx-mjrm-v3g8 <p><strong>Affected:</strong> PyPI: matrix-synapse</p> <p>### Impact A malicious homeserver could redirect requests to their .well-known file to a large file. This can lead to a denial of service attack where homeservers will consume significantly more resources when requesting the .well-known file of a malicious homeserver.</p> <p>This affects any server which accepts federation requests from untrusted servers.</p> <p>### Patches Issue is resolved by #8950. A bug not affecting the security aspects of this was fixed in #9108.</p> <p>### Workarounds The `federation_domain_whitelist` setting can be used to restrict the homeservers communicated with over federation.</p> <p><strong>Affected:</strong> PyPI: matrix-synapse</p> <p>### Impact A malicious homeserver could redirect requests to their .well-known file to a large file. This can lead to a denial of service attack where homeservers will consume significantly more resources when requesting the .well-known file of a malicious homeserver.</p> <p>This affects any server which accepts federation requests from untrusted servers.</p> <p>### Patches Issue is resolved by #8950. A bug not affecting the security aspects of this was fixed in #9108.</p> <p>### Workarounds The `federation_domain_whitelist` setting can be used to restrict the homeservers communicated with over federation.</p> https://cve.radiocsirt.org/vuln/ghsa-2hwx-mjrm-v3g8 https://cve.radiocsirt.org/vuln/gsd-2021-21274 gsd-2021-21274 https://cve.radiocsirt.org/vuln/gsd-2021-21274 https://cve.radiocsirt.org/vuln/pysec-2021-132 <p><strong>Affected:</strong> PyPI: matrix-synapse</p> <p>Synapse is a Matrix reference homeserver written in python (pypi package matrix-synapse). Matrix is an ecosystem for open federated Instant Messaging and VoIP. In Synapse before version 1.25.0, a malicious homeserver could redirect requests to their .well-known file to a large file. This can lead to a denial of service attack where homeservers will consume significantly more resources when requesting the .well-known file of a malicious homeserver. This affects any server which accepts federation requests from untrusted servers. Issue is resolved in version 1.25.0. As a workaround the `federation_domain_whitelist` setting can be used to restrict the homeservers communicated with over federation.</p> <p><strong>Affected:</strong> PyPI: matrix-synapse</p> <p>Synapse is a Matrix reference homeserver written in python (pypi package matrix-synapse). Matrix is an ecosystem for open federated Instant Messaging and VoIP. In Synapse before version 1.25.0, a malicious homeserver could redirect requests to their .well-known file to a large file. This can lead to a denial of service attack where homeservers will consume significantly more resources when requesting the .well-known file of a malicious homeserver. This affects any server which accepts federation requests from untrusted servers. Issue is resolved in version 1.25.0. As a workaround the `federation_domain_whitelist` setting can be used to restrict the homeservers communicated with over federation.</p> https://cve.radiocsirt.org/vuln/pysec-2021-132 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-21274 <p><strong>Affected:</strong> Ubuntu:Pro:18.04:LTS: matrix-synapse, Ubuntu:Pro:20.04:LTS: matrix-synapse</p> <p>Synapse is a Matrix reference homeserver written in python (pypi package matrix-synapse). Matrix is an ecosystem for open federated Instant Messaging and VoIP. In Synapse before version 1.25.0, a malicious homeserver could redirect requests to their .well-known file to a large file. This can lead to a denial of service attack where homeservers will consume significantly more resources when requesting the .well-known file of a malicious homeserver. This affects any server which accepts federation requests from untrusted servers. Issue is resolved in version 1.25.0. As a workaround the `federation_domain_whitelist` setting can be used to restrict the homeservers communicated with over federation.</p> <p><strong>Affected:</strong> Ubuntu:Pro:18.04:LTS: matrix-synapse, Ubuntu:Pro:20.04:LTS: matrix-synapse</p> <p>Synapse is a Matrix reference homeserver written in python (pypi package matrix-synapse). Matrix is an ecosystem for open federated Instant Messaging and VoIP. In Synapse before version 1.25.0, a malicious homeserver could redirect requests to their .well-known file to a large file. This can lead to a denial of service attack where homeservers will consume significantly more resources when requesting the .well-known file of a malicious homeserver. This affects any server which accepts federation requests from untrusted servers. Issue is resolved in version 1.25.0. As a workaround the `federation_domain_whitelist` setting can be used to restrict the homeservers communicated with over federation.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-21274