This repository has been archived by the owner on Apr 26, 2024. It is now read-only.
v1.95.1
Synapse 1.95.1 (2023-10-31)
Security advisory
The following issue is fixed in 1.95.1.
-
GHSA-mp92-3jfm-3575 / CVE-2023-43796 — Moderate Severity
Cached device information of remote users can be queried from Synapse. This can be used to enumerate the remote users known to a homeserver.
See the advisory for more details. If you have any questions, email security@matrix.org.