CVE-2025-30355
2 advisories.
PyPI/matrix-synapse CVE-2025-30355: high 7.1
Synapse vulnerable to federation denial of service via malformed events
Action: Upgrade matrix-synapse to 1.127.1 or later.
pip install matrix-synapse==1.127.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.127.1 | - |
Fixed versions
| 1.127.1 |
Sources
- osv: GHSA-v56r-hwv5-mxg6
- https://github.com/element-hq/synapse/security/advisories/GHSA-v56r-hwv5-mxg6
- https://nvd.nist.gov/vuln/detail/CVE-2025-30355
- https://github.com/element-hq/synapse/commit/2277df2a1eb685f85040ef98fa21d41aa4cdd389
- https://github.com/element-hq/synapse
- https://github.com/element-hq/synapse/releases/tag/v1.127.1
CVE-2025-30355 · published · modified · JSON
PyPI/matrix-synapse CVE-2025-30355: high 7.1
Synapse vulnerable to federation denial of service via malformed events
Action: Upgrade matrix-synapse to 1.127.1 or later.
pip install matrix-synapse==1.127.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.127.1 | - |
Fixed versions
| 1.127.1 |
Sources
- osv: PYSEC-2026-1614
- https://github.com/element-hq/synapse/security/advisories/GHSA-v56r-hwv5-mxg6
- https://nvd.nist.gov/vuln/detail/CVE-2025-30355
- https://github.com/element-hq/synapse/commit/2277df2a1eb685f85040ef98fa21d41aa4cdd389
- https://github.com/element-hq/synapse
- https://github.com/element-hq/synapse/releases/tag/v1.127.1
- https://pypi.org/project/matrix-synapse
- https://github.com/advisories/GHSA-v56r-hwv5-mxg6
CVE-2025-30355 · published · modified · JSON