{"action":"Upgrade matrix-synapse to 1.61.1 or later.","affected":[{"fixed":"1.61.1","introduced":"0"}],"component":"matrix-synapse","cve_ids":["CVE-2022-31052"],"ecosystem":"PyPI","epss":0.0166,"exploited":false,"fixed_versions":["1.61.1"],"ghsa_id":"GHSA-22p3-qrh9-cx32","id":"tcs_01M5KGGMG3AJSGD3AC03BVF75T","modified_at":"2023-11-08T04:09:24.314098Z","published_at":"2022-06-28T17:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2022-224","https://github.com/matrix-org/synapse/security/advisories/GHSA-22p3-qrh9-cx32","https://spec.matrix.org/v1.2/client-server-api/#get_matrixmediav3preview_url","https://github.com/matrix-org/synapse/commit/fa1308061802ac7b7d20e954ba7372c5ac292333","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QGSDQ4YAITCUACAB7SXQZDJIU3IQ4CJD/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7EARKKJZ2W7WUITFDT4EG4NVATFYJQHF/"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2022-224","url":"https://osv.dev/vulnerability/PYSEC-2022-224"}],"summary":"Synapse is an open source home server implementation for the Matrix chat network. In versions prior to 1.61.1 URL previews of some web pages can exhaust the available stack space for the Synapse proce"}