Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2024-53867
4.3
MEDIUMCVSS v3
Published
December 3, 2024
Affected
2 projects
Assigned by
GitHub
Severity scale
010
Description
Synapse is an open-source Matrix homeserver. The Sliding Sync feature on Synapse versions between 1.113.0rc1 and 1.120.0 can leak partial room state changes to users no longer in a room. Non-state events, like messages, are unaffected. This vulnerability is fixed in 1.120.1.
GitHub