Homepage

matrix-synapse vulnerabilities

Homeserver for the Matrix decentralised comms protocol
Licenses: AGPL-3.0 | AGPL-3.0-or-later OR LicenseRef-Element-Commercial | Apache-2.0
Published: 7 years ago Last updated: 4 days ago Latest version: 1.143.0 Latest non-vulnerable version: 1.143.0
pip
GitHub

Package Health Score

90/100
  • securityNo known security issues
  • popularityPopular
  • maintenanceHealthy
  • communityActive

Maintenance

HEALTHY

Commit Frequency

Loading chart...

Open Issues
1801
Open PR
106
New PRS
1
Last Release
4 days ago
Last Commit
1 days ago
Maintainers
380

Further analysis of the maintenance status of matrix-synapse based on released PyPI versions cadence, the repository activity, and other data points determined that its maintenance is Healthy.

We found that matrix-synapse demonstrates a positive version release cadence with at least one new version released in the past 3 months.

As a healthy sign for on-going project maintenance, we found that the GitHub repository had at least 1 pull request or issue interacted with by the community.

Popularity

POPULAR
GitHub Stars
3.2k
Forks
418
Contributors
380

Based on project statistics from the GitHub repository for the PyPI package matrix-synapse, we found that it has been starred 3,188 times.

Community

ACTIVE
Readme
Yes
Contributing.md
Yes
Code of Conduct
No
Contributors
380
Funding
No
LICENSE
AGPL-3.0

A good and healthy external contribution signal for matrix-synapse project, which invites more than one hundred open source maintainers to collaborate on the repository.

We found a way for you to contribute to the project! Looks like matrix-synapse is missing a Code of Conduct.

License

AGPL-3.0[1.99.0rc1,1.140.0rc1);
AGPL-3.0-or-later OR LicenseRef-Element-Commercial[1.140.0rc1,);
Apache-2.0[0.33.5,1.99.0rc1);
Report a new vulnerability Found a mistake?

Direct Vulnerabilities

Known vulnerabilities in the matrix-synapse package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Security

NO KNOWN SECURITY ISSUES
Show only direct vulnerabilities in latest version

No vulnerabilities found in the latest version

There are 40 total vulnerabilities, but none affect the latest version (1.143.0)

No vulnerabilities found

Package versions

479 VERSIONS IN TOTAL See all versions
versionpublisheddirect vulnerabilities
1.143.025 Nov, 2025
  • 0
    C
  • 0
    H
  • 0
    M
  • 0
    L
1.143.0rc219 Nov, 2025
  • 0
    C
  • 0
    H
  • 0
    M
  • 0
    L
1.142.118 Nov, 2025
  • 0
    C
  • 0
    H
  • 0
    M
  • 0
    L
1.142.011 Nov, 2025
  • 0
    C
  • 0
    H
  • 0
    M
  • 0
    L
1.142.0rc47 Nov, 2025
  • 0
    C
  • 0
    H
  • 0
    M
  • 0
    L
1.142.0rc34 Nov, 2025
  • 0
    C
  • 0
    H
  • 0
    M
  • 0
    L
1.141.029 Oct, 2025
  • 0
    C
  • 0
    H
  • 0
    M
  • 0
    L
1.141.0rc228 Oct, 2025
  • 0
    C
  • 0
    H
  • 0
    M
  • 0
    L
1.141.0rc121 Oct, 2025
  • 0
    C
  • 0
    H
  • 0
    M
  • 0
    L
1.140.014 Oct, 2025
  • 0
    C
  • 0
    H
  • 0
    M
  • 0
    L