Synapse is an open-source Matrix homeserver. The Sliding Sync feature on Synapse versions between 1.113.0rc1 and 1.120.0 can leak partial room state changes to users no longer in a room. Non-state events, like messages, are unaffected. This vulnerability is fixed in 1.120.1.
| Package (Ecosystem) | Introduced | Fixed | Limit |
|---|---|---|---|
| matrix-synapse(PyPI) | 1.113.0rc1 | 1.120.1 | N/A |
CVSS Metrics
