element-hq synapse

• CVE-2026-45078 Medium 6.8 Synapse CPU starvation (Denial of Service) 0.1%
• CVE-2026-45076 Medium 5.1 Synapse pagination denial of service 0.4%
• CVE-2025-61672 Medium 5.3 Synapse: Invalid device keys degrade federation functionality 0.5%
• CVE-2025-30355 High 7.1 Synapse vulnerable to federation denial of service via malformed events 1.2%
• CVE-2024-37303 Medium 5.3 Synapse unauthenticated writes to the media repository allow planting of problematic content 0.4%
• CVE-2024-37302 High 7.5 Synapse denial of service through media disk space consumption 0.6%
• CVE-2024-52805 High 8.2 Synapse allows unsupported content types to lead to memory exhaustion 0.7%
• CVE-2024-52815 High 8.7 Synapse allows a a malformed invite to break the invitee's `/sync` 0.6%
• CVE-2024-53867 Medium 4.3 Synapse Matrix has a partial room state leak via Sliding Sync 0.4%
• CVE-2024-53863 High 8.2 Synapse can be forced to thumbnail unexpected file formats, invoking external, potentially untrustworthy decoders 0.6%
• CVE-2024-31208 Medium 6.5 Synapse's V2 state resolution weakness allows DoS from remote room members 1.5%