| Package | Affected versions | Patched versions |
|---|---|---|
| matrix-synapse | < 1.33.0 | 1.33.0 |
Missing input validation of some parameters on the endpoints used to confirm third-party identifiers could cause excessive use of disk space and memory leading to resource exhaustion.
The issue is fixed by https://github.com/matrix-org/synapse/pull/9855.
There are no known workarounds.
n/a
If you have any questions or comments about this advisory, email us at [email protected].
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free