synapse
Security Risk Profile
31
/100
lowSecurity Risk Score
Comprehensive risk assessment based on 7 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from October 21, 2014 to present
7
Total CVEs
1
Critical+High
0
Exploited
0
Unpatched
Threat Assessment
Avg CVSS
5.7
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
0
Critical/High
Risk Level
31/100
low
Severity Distribution
Critical
0High
1Medium
6Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
1Age Distribution
Common Weaknesses (CWE)
1
Input Validation
2
2
Infoleak
1
Most Affected Products
1. pip/matrix-synapse6
2. matrix synapse4
3. synapse Synapse2
4. debian/matrix-synapse2
5. synapse Mobility1
Recent Vulnerabilities
See more →CVE-2025-61672
CVSS 5.3medium
Synapse: Invalid device keys degrade federation functionality
10/8/2025
CVE-2025-54551
CVSS 5.3medium
8/20/2025🔧 No Patch
CVE-2025-30355
CVSS 7.5EPSS 0%high
Synapse vulnerable to federation denial of service via malformed events
3/27/2025
CVE-2023-32323
CVSS 5.0medium
Synapse Outgoing federation to specific hosts can be disabled by sending malicious invites
5/24/2023
CVE-2022-39374
CVSS 6.5medium
Synapse Denial of service due to incorrect application of event authorization rules during state resolution
5/24/2023
CVE-2022-39335
CVSS 5.0medium
Synapse does not apply enough checks to servers requesting auth events of events in a room
5/24/2023
CVE-2014-7787
CVSS 5.4medium
10/21/2014🔧 No Patch
Monitor synapse in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.