| Package | Affected versions | Patched versions |
|---|---|---|
| matrix-sydent | < 1.0.3 | 1.0.3 |
| matrix-synapse | < 0.99.3.1 | 0.99.3.1 |
| sydent | < 1.0.3 | 1.0.3 |
| synapse | < 0.99.3.1 | 0.99.3.1 |
An issue was discovered in Matrix Sydent before 1.0.3 and Synapse before 0.99.3.1. Random number generation is mishandled, which makes it easier for attackers to predict a Sydent authentication token or a Synapse random ID.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free