Synapse is an open-source Matrix homeserver. In Synapse before 1.120.1, multipart/form-data requests can in certain configurations transiently increase memory consumption beyond expected levels while processing the request, which can be used to amplify denial of service attacks. Synapse 1.120.1 resolves the issue by denying requests with unsupported multipart/form-data content type.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade synapse | Aug 8, 2025 | Dec 3, 2024 |
| Freebsd | — | Upgrade py38-matrix-synapseUpgrade py39-matrix-synapseUpgrade py311-matrix-synapseUpgrade py310-matrix-synapse | Dec 18, 2024 | Dec 15, 2024 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Dec 3, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub