Alpine/synapse: unknown
Synapse is an open source Matrix homeserver implementation. Lack of validation for device keys in Synapse before 1.138.3 and in Synapse 1.139.0 allow an attacker registered on the victim homeserver to
Action: Upgrade synapse to 1.139.2-r0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.139.2-r0 | - |
Fixed versions
| 1.139.2-r0 |
Sources
published · modified · JSON