Product by Element-hq
Synapse
11 known vulnerabilities in Synapse (Element-hq), 0 of them actively exploited (CISA KEV).
Key figures
11
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
1
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2025-30355 | Synapse vulnerable to federation denial of service via malformed events | 7.1 | |
| Medium | CVE-2024-31208 | Synapse's V2 state resolution weakness allows DoS from remote room members | 6.5 | |
| High | CVE-2024-52805 | Synapse allows unsupported content types to lead to memory exhaustion | 7.5 | |
| Critical | CVE-2024-53863 | Element-hq Synapse: Unrestricted Upload of File with Dangerous Type | 9.1 | |
| High | CVE-2024-52815 | Synapse allows a a malformed invite to break the invitee's `/sync` | 5.3 | |
| High | CVE-2024-37302 | Synapse denial of service through media disk space consumption | 7.5 | |
| Medium | CVE-2026-45078 | Synapse CPU starvation (Denial of Service) | 5.5 | |
| Medium | CVE-2025-61672 | Synapse: Invalid device keys degrade federation functionality | — | |
| Medium | CVE-2026-45076 | Synapse pagination denial of service | 2.7 | |
| Medium | CVE-2024-37303 | Synapse unauthenticated writes to the media repository allow planting of problematic content | 5.3 | |
| Medium | CVE-2024-53867 | Synapse Matrix has a partial room state leak via Sliding Sync | 4.3 |