Homepage

matrix-synapse vulnerabilities

Homeserver for the Matrix decentralised comms protocol
Licenses: AGPL-3.0 | AGPL-3.0-or-later OR LicenseRef-Element-Commercial | Unknown | Apache-2.0
Published: 7 years ago Last updated: 2 days ago Latest version: 1.150.0 Latest non-vulnerable version: 1.150.0
pip
GitHub

Package Health Score

90/100
  • securityNo known security issues
  • popularityPopular
  • maintenanceHealthy
  • communityActive

Maintenance

HEALTHY

Commit Frequency

Loading chart...

Open Issues
1842
Open PR
127
New PRS
1
Last Release
2 days ago
Last Commit
12 hours ago
Maintainers
380

Further analysis of the maintenance status of matrix-synapse based on released PyPI versions cadence, the repository activity, and other data points determined that its maintenance is Healthy.

We found that matrix-synapse demonstrates a positive version release cadence with at least one new version released in the past 3 months.

As a healthy sign for on-going project maintenance, we found that the GitHub repository had at least 1 pull request or issue interacted with by the community.

Popularity

POPULAR
GitHub Stars
3.9k
Forks
497
Contributors
380

Based on project statistics from the GitHub repository for the PyPI package matrix-synapse, we found that it has been starred 3,936 times.

Community

ACTIVE
Readme
Yes
Contributing.md
Yes
Code of Conduct
No
Contributors
380
Funding
No
LICENSE
AGPL-3.0

A good and healthy external contribution signal for matrix-synapse project, which invites more than one hundred open source maintainers to collaborate on the repository.

We found a way for you to contribute to the project! Looks like matrix-synapse is missing a Code of Conduct.

License

AGPL-3.0[1.99.0rc1,1.140.0rc1);
AGPL-3.0-or-later OR LicenseRef-Element-Commercial[1.140.0rc1,1.145.0rc1);
Unknown[1.145.0rc1,);
Apache-2.0[0.33.5,1.99.0rc1);
Report a new vulnerability Found a mistake?

Direct Vulnerabilities

Known vulnerabilities in the matrix-synapse package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Security

NO KNOWN SECURITY ISSUES
Show only direct vulnerabilities in latest version
No vulnerabilities found

No vulnerabilities found in the latest version

There are 40 total vulnerabilities, but none affect the latest version (1.150.0)

Package versions

498 VERSIONS IN TOTAL See all versions
versionpublisheddirect vulnerabilities
1.150.024 Mar, 2026
  • 0
    C
  • 0
    H
  • 0
    M
  • 0
    L
1.150.0rc117 Mar, 2026
  • 0
    C
  • 0
    H
  • 0
    M
  • 0
    L
1.149.111 Mar, 2026
  • 0
    C
  • 0
    H
  • 0
    M
  • 0
    L
1.149.010 Mar, 2026
  • 0
    C
  • 0
    H
  • 0
    M
  • 0
    L
1.149.0rc13 Mar, 2026
  • 0
    C
  • 0
    H
  • 0
    M
  • 0
    L
1.148.024 Feb, 2026
  • 0
    C
  • 0
    H
  • 0
    M
  • 0
    L
1.148.0rc117 Feb, 2026
  • 0
    C
  • 0
    H
  • 0
    M
  • 0
    L
1.147.112 Feb, 2026
  • 0
    C
  • 0
    H
  • 0
    M
  • 0
    L
1.147.010 Feb, 2026
  • 0
    C
  • 0
    H
  • 0
    M
  • 0
    L
1.147.0rc13 Feb, 2026
  • 0
    C
  • 0
    H
  • 0
    M
  • 0
    L