Alpine/synapse: high 7.5
Synapse is an open source Matrix homeserver implementation. A malicious server can craft events which, when received, prevent Synapse version up to 1.127.0 from federating with other servers. The vuln
Action: Upgrade synapse to 1.127.1-r0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.127.1-r0 | - |
Fixed versions
| 1.127.1-r0 |
Sources
- osv: ALPINE-CVE-2025-30355#Alpine:v3.22/synapse
- https://security.alpinelinux.org/vuln/CVE-2025-30355
published · modified · JSON