https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 00:57:36 +0000 https://cve.radiocsirt.org/vuln/cve-2024-53867 <p><strong>Affected:</strong> element-hq synapse</p> <p>Synapse is an open-source Matrix homeserver. The Sliding Sync feature on Synapse versions between 1.113.0rc1 and 1.120.0 can leak partial room state changes to users no longer in a room. Non-state events, like messages, are unaffected. This vulnerability is fixed in 1.120.1.</p> <p><strong>Affected:</strong> element-hq synapse</p> <p>Synapse is an open-source Matrix homeserver. The Sliding Sync feature on Synapse versions between 1.113.0rc1 and 1.120.0 can leak partial room state changes to users no longer in a room. Non-state events, like messages, are unaffected. This vulnerability is fixed in 1.120.1.</p> https://cve.radiocsirt.org/vuln/cve-2024-53867 https://cve.radiocsirt.org/vuln/ghsa-56w4-5538-8v8h <p><strong>Affected:</strong> PyPI: matrix-synapse</p> <p>### Impact The Sliding Sync feature on Synapse versions between 1.113.0rc1 and 1.120.0 can leak partial room state changes to users no longer in a room. Non-state events, like messages, are unaffected.</p> <p>### Patches Synapse version 1.120.1 fixes the problem.</p> <p>### Workarounds Disable Sliding Sync.</p> <p>### References https://github.com/matrix-org/matrix-spec-proposals/pull/4186 https://github.com/element-hq/synapse/blob/d80cd57c54427687afcb48740d99219c88a0fff1/synapse/config/experimental.py#L341-L344</p> <p>### For more information</p> <p>If you have any questions or comments about this advisory, please email us at [security at element.io](mailto:security@element.io).</p> <p><strong>Affected:</strong> PyPI: matrix-synapse</p> <p>### Impact The Sliding Sync feature on Synapse versions between 1.113.0rc1 and 1.120.0 can leak partial room state changes to users no longer in a room. Non-state events, like messages, are unaffected.</p> <p>### Patches Synapse version 1.120.1 fixes the problem.</p> <p>### Workarounds Disable Sliding Sync.</p> <p>### References https://github.com/matrix-org/matrix-spec-proposals/pull/4186 https://github.com/element-hq/synapse/blob/d80cd57c54427687afcb48740d99219c88a0fff1/synapse/config/experimental.py#L341-L344</p> <p>### For more information</p> <p>If you have any questions or comments about this advisory, please email us at [security at element.io](mailto:security@element.io).</p> https://cve.radiocsirt.org/vuln/ghsa-56w4-5538-8v8h