| Package | Affected versions | Patched versions |
|---|---|---|
| matrix-synapse | < 0.28.1 | 0.28.1 |
| synapse | < 0.28.1 | 0.28.1 |
Matrix Synapse before 0.28.1 is prone to a denial of service flaw where malicious events injected with depth = 2<sup>63</sup> - 1 render rooms unusable, related to federation/federation_base.py and handlers/message.py, as exploited in the wild in April 2018.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free