{"action":"Upgrade matrix-synapse to 1.94.0 or later.","affected":[{"fixed":"1.94.0","introduced":"0"}],"component":"matrix-synapse","cve_ids":["CVE-2023-45129"],"ecosystem":"PyPI","epss":0.01394,"exploited":false,"fixed_versions":["1.94.0"],"ghsa_id":"GHSA-5chr-wjw5-3gq4","id":"tcs_01M5KF0PF0Z3K1AQH80KZ516XX","modified_at":"2026-09-10T03:49:58.536596047Z","published_at":"2023-10-10T21:27:53Z","references":["https://osv.dev/vulnerability/GHSA-5chr-wjw5-3gq4","https://github.com/matrix-org/synapse/security/advisories/GHSA-5chr-wjw5-3gq4","https://nvd.nist.gov/vuln/detail/CVE-2023-45129","https://github.com/matrix-org/synapse/pull/16360","https://github.com/matrix-org/synapse/commit/f84da3c32ec74cf054e2fd6d10618aa4997cffaa","https://github.com/matrix-org/synapse","https://github.com/pypa/advisory-database/tree/main/vulns/matrix-synapse/PYSEC-2023-199.yaml","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KEVRB4MG5UXQ5RLZHSUJXM5GWEBYYS5B","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/N6P4QULVUE254WI7XF2LWWOGHCYVFXFY","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WRO4MPQ6HOXIUZM6RJP6VTCTMV7RD2T3","https://matrix-org.github.io/synapse/latest/admin_api/rooms.html#version-2-new-version","https://security.gentoo.org/glsa/202401-12"],"severity":{"label":"medium","score":4.9},"sources":[{"source":"osv","source_id":"GHSA-5chr-wjw5-3gq4","url":"https://osv.dev/vulnerability/GHSA-5chr-wjw5-3gq4"}],"summary":"matrix-synapse vulnerable to denial of service due to malicious server ACL events"}