https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 03:55:46 +0000 https://cve.radiocsirt.org/vuln/cve-2023-41335 <p><strong>Affected:</strong> matrix-org synapse</p> <p>Synapse is an open-source Matrix homeserver written and maintained by the Matrix.org Foundation. When users update their passwords, the new credentials may be briefly held in the server database. While this doesn&#39;t grant the server any added capabilities—it already learns the users&#39; passwords as part of the authentication process—it does disrupt the expectation that passwords won&#39;t be stored in the database. As a result, these passwords could inadvertently be captured in database backups for a longer duration. These temporarily stored passwords are automatically erased after a 48-hour window. This issue has been addressed in version 1.93.0. Users are advised to upgrade. There are no known workarounds for this issue.</p> <p><strong>Affected:</strong> matrix-org synapse</p> <p>Synapse is an open-source Matrix homeserver written and maintained by the Matrix.org Foundation. When users update their passwords, the new credentials may be briefly held in the server database. While this doesn&#39;t grant the server any added capabilities—it already learns the users&#39; passwords as part of the authentication process—it does disrupt the expectation that passwords won&#39;t be stored in the database. As a result, these passwords could inadvertently be captured in database backups for a longer duration. These temporarily stored passwords are automatically erased after a 48-hour window. This issue has been addressed in version 1.93.0. Users are advised to upgrade. There are no known workarounds for this issue.</p> https://cve.radiocsirt.org/vuln/cve-2023-41335