PyPI/matrix-synapse CVE-2026-45076: low 2.7, EPSS 0.37%
Synapse is an open source Matrix homeserver implementation. Prior to 1.152.1, in federated rooms, malicious homeservers can craft room events in such a way that prevents Synapse from providing full hi
Action: Upgrade matrix-synapse to 1.152.1 or later.
pip install matrix-synapse==1.152.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.152.1 | - |
Fixed versions
| 1.152.1 |
Sources
CVE-2026-45076 · published · modified · JSON