{"action":"Upgrade matrix-synapse to 1.105.1 or later.","affected":[{"fixed":"1.105.1","introduced":"0"}],"component":"matrix-synapse","cve_ids":["CVE-2024-31208"],"ecosystem":"PyPI","epss":0.01463,"exploited":false,"fixed_versions":["1.105.1"],"ghsa_id":"GHSA-3h7q-rfh9-xm4v","id":"tcs_01M5KGN97SRK7M1Y206ZT514RZ","modified_at":"2024-04-23T21:56:31.264267Z","published_at":"2024-04-23T18:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2024-50","https://github.com/element-hq/synapse/security/advisories/GHSA-3h7q-rfh9-xm4v","https://github.com/element-hq/synapse/commit/55b0aa847a61774b6a3acdc4b177a20dc019f01a","https://github.com/element-hq/synapse/releases/tag/v1.105.1"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2024-50","url":"https://osv.dev/vulnerability/PYSEC-2024-50"}],"summary":"Synapse is an open-source Matrix homeserver. A remote Matrix user with malicious intent, sharing a room with Synapse instances before 1.105.1, can dispatch specially crafted events to exploit a weakne"}