{"action":"Upgrade matrix-synapse to 1.33.0 or later.","affected":[{"fixed":"1.33.0","introduced":"0"}],"component":"matrix-synapse","cve_ids":[],"ecosystem":"PyPI","exploited":false,"fixed_versions":["1.33.0"],"ghsa_id":"GHSA-7h5v-85w9-pq6c","id":"tcs_01M5KF6153JR2S5Z0KAV1HNA44","modified_at":"2024-12-02T05:59:59.340898Z","published_at":"2021-05-19T23:01:45Z","references":["https://osv.dev/vulnerability/GHSA-7h5v-85w9-pq6c","https://github.com/matrix-org/synapse/security/advisories/GHSA-7h5v-85w9-pq6c","https://github.com/matrix-org/synapse/pull/9855"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-7h5v-85w9-pq6c","url":"https://osv.dev/vulnerability/GHSA-7h5v-85w9-pq6c"}],"summary":"Denial of service (via resource exhaustion) due to improper input validation in third-party identifier endpoint"}