| Package | Affected versions | Patched versions |
|---|---|---|
| matrix-synapse | < 1.95.1 | 1.95.1 |
| synapse | < 1.95.1 | 1.95.1 |
Cached device information of remote users can be queried from Synapse. This can be used to enumerate the remote users known to a homeserver.
System administrators are encouraged to upgrade to Synapse 1.95.1 as soon as possible.
The federation_domain_whitelist can be used to limit federation traffic with a homeserver.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free