https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 08:42:00 +0000 https://cve.radiocsirt.org/vuln/cve-2025-30355 <p><strong>Affected:</strong> element-hq synapse</p> <p>Synapse is an open source Matrix homeserver implementation. A malicious server can craft events which, when received, prevent Synapse version up to 1.127.0 from federating with other servers. The vulnerability has been exploited in the wild and has been fixed in Synapse v1.127.1. No known workarounds are available.</p> <p><strong>Affected:</strong> element-hq synapse</p> <p>Synapse is an open source Matrix homeserver implementation. A malicious server can craft events which, when received, prevent Synapse version up to 1.127.0 from federating with other servers. The vulnerability has been exploited in the wild and has been fixed in Synapse v1.127.1. No known workarounds are available.</p> https://cve.radiocsirt.org/vuln/cve-2025-30355 https://cve.radiocsirt.org/vuln/ghsa-v56r-hwv5-mxg6 <p><strong>Affected:</strong> PyPI: matrix-synapse</p> <p>### Impact A malicious server can craft events with a `depth` outside the integer range allowed by Canonical JSON. When such an event is received by Synapse version up to 1.127.0, it prevents it from federating with other servers. The vulnerability has been exploited in the wild.</p> <p>### Patches Fixed in Synapse v1.127.1.</p> <p>### Workarounds Closed federation environments of trusted servers or non-federating installations are not affected.</p> <p>### For more information</p> <p>If you have any questions or comments about this advisory, please email us at [security at element.io](mailto:security@element.io).</p> <p><strong>Affected:</strong> PyPI: matrix-synapse</p> <p>### Impact A malicious server can craft events with a `depth` outside the integer range allowed by Canonical JSON. When such an event is received by Synapse version up to 1.127.0, it prevents it from federating with other servers. The vulnerability has been exploited in the wild.</p> <p>### Patches Fixed in Synapse v1.127.1.</p> <p>### Workarounds Closed federation environments of trusted servers or non-federating installations are not affected.</p> <p>### For more information</p> <p>If you have any questions or comments about this advisory, please email us at [security at element.io](mailto:security@element.io).</p> https://cve.radiocsirt.org/vuln/ghsa-v56r-hwv5-mxg6