Publish Advisories

GHSA-6qf2-7x63-mm6v
GHSA-8q93-326v-3m7g
GHSA-c35q-vxrp-ph26
GHSA-p3hx-pwf3-j8wr
GHSA-wx44-2q6h-j6p8

Author: advisory-database[bot]

advisories/github-reviewed/2026/05/GHSA-6qf2-7x63-mm6v/GHSA-6qf2-7x63-mm6v.json

@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-6qf2-7x63-mm6v",
-  "modified": "2026-05-14T16:18:46Z",
+  "modified": "2026-06-09T10:18:35Z",
   "published": "2026-05-14T16:18:46Z",
   "aliases": [
     "CVE-2026-45076"
@@ -40,9 +40,17 @@
       "type": "WEB",
       "url": "https://github.com/element-hq/synapse/security/advisories/GHSA-6qf2-7x63-mm6v"
     },
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45076"
+    },
     {
       "type": "PACKAGE",
       "url": "https://github.com/element-hq/synapse"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/pypa/advisory-database/tree/main/vulns/matrix-synapse/PYSEC-2026-194.yaml"
     }
   ],
   "database_specific": {
@@ -52,6 +60,6 @@
     "severity": "MODERATE",
     "github_reviewed": true,
     "github_reviewed_at": "2026-05-14T16:18:46Z",
-    "nvd_published_at": null
+    "nvd_published_at": "2026-05-28T17:16:31Z"
   }
 }

advisories/github-reviewed/2026/05/GHSA-8q93-326v-3m7g/GHSA-8q93-326v-3m7g.json

@@ -1,14 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-8q93-326v-3m7g",
-  "modified": "2026-05-14T16:18:41Z",
+  "modified": "2026-06-09T10:18:03Z",
   "published": "2026-05-14T16:18:40Z",
   "aliases": [
     "CVE-2026-45078"
   ],
   "summary": "Synapse CPU starvation (Denial of Service)",
   "details": "### Impact\n\nLocal authenticated users can cause Synapse to starve other requests of CPU and lead to other requests failing, causing other users to be denied service.\n\nHomeservers that trust all their local users are not at risk.\n\n### Patches\n\nUpdate to Synapse 1.152.1 or later.\n\n### Workarounds\n\nIf Synapse is deployed behind a reverse proxy, the reverse proxy could be configured to limit the rate of user requests,\npreventing or increasing the difficulty of the attack.\n\n### Identifiers\n\n- ELEMENTSEC-2026-1706\n\n### For more information\n\nIf you have any questions or comments about this advisory, please email us at [security at element.io](mailto:security@element.io).",
   "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
+    },
     {
       "type": "CVSS_V4",
       "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"
@@ -40,6 +44,10 @@
       "type": "WEB",
       "url": "https://github.com/element-hq/synapse/security/advisories/GHSA-8q93-326v-3m7g"
     },
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45078"
+    },
     {
       "type": "WEB",
       "url": "https://github.com/element-hq/synapse/issues/19394"
@@ -51,15 +59,20 @@
     {
       "type": "PACKAGE",
       "url": "https://github.com/element-hq/synapse"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/pypa/advisory-database/tree/main/vulns/matrix-synapse/PYSEC-2026-191.yaml"
     }
   ],
   "database_specific": {
     "cwe_ids": [
-      "CWE-400"
+      "CWE-400",
+      "CWE-770"
     ],
     "severity": "HIGH",
     "github_reviewed": true,
     "github_reviewed_at": "2026-05-14T16:18:40Z",
-    "nvd_published_at": null
+    "nvd_published_at": "2026-05-28T17:16:31Z"
   }
 }

advisories/github-reviewed/2026/05/GHSA-c35q-vxrp-ph26/GHSA-c35q-vxrp-ph26.json

@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-c35q-vxrp-ph26",
-  "modified": "2026-05-13T15:30:59Z",
+  "modified": "2026-06-09T10:18:42Z",
   "published": "2026-05-13T15:30:59Z",
   "aliases": [
     "CVE-2026-44797"
@@ -59,6 +59,10 @@
       "type": "WEB",
       "url": "https://github.com/nautobot/nautobot/security/advisories/GHSA-c35q-vxrp-ph26"
     },
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44797"
+    },
     {
       "type": "WEB",
       "url": "https://github.com/nautobot/nautobot/commit/16aa4aa9796ab7a31c4d615ec945e1f16d8c77c4"
@@ -87,6 +91,6 @@
     "severity": "HIGH",
     "github_reviewed": true,
     "github_reviewed_at": "2026-05-13T15:30:59Z",
-    "nvd_published_at": null
+    "nvd_published_at": "2026-05-28T18:16:33Z"
   }
 }

advisories/github-reviewed/2026/05/GHSA-p3hx-pwf3-j8wr/GHSA-p3hx-pwf3-j8wr.json

@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-p3hx-pwf3-j8wr",
-  "modified": "2026-05-13T15:31:04Z",
+  "modified": "2026-06-09T10:18:49Z",
   "published": "2026-05-13T15:31:04Z",
   "aliases": [
     "CVE-2026-44798"
@@ -59,6 +59,10 @@
       "type": "WEB",
       "url": "https://github.com/nautobot/nautobot/security/advisories/GHSA-p3hx-pwf3-j8wr"
     },
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44798"
+    },
     {
       "type": "WEB",
       "url": "https://github.com/nautobot/nautobot/commit/9deddfc91ad9260ad17b5e20084e9e2d15be3609"
@@ -88,6 +92,6 @@
     "severity": "HIGH",
     "github_reviewed": true,
     "github_reviewed_at": "2026-05-13T15:31:04Z",
-    "nvd_published_at": null
+    "nvd_published_at": "2026-05-28T18:16:34Z"
   }
 }

advisories/github-reviewed/2026/05/GHSA-wx44-2q6h-j6p8/GHSA-wx44-2q6h-j6p8.json

@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-wx44-2q6h-j6p8",
-  "modified": "2026-05-14T20:29:33Z",
+  "modified": "2026-06-09T10:17:09Z",
   "published": "2026-05-14T20:29:33Z",
   "aliases": [
     "CVE-2026-45311"
@@ -74,10 +74,18 @@
     }
   ],
   "references": [
+    {
+      "type": "WEB",
+      "url": "https://github.com/Hmbown/CodeWhale/security/advisories/GHSA-wx44-2q6h-j6p8"
+    },
     {
       "type": "WEB",
       "url": "https://github.com/Hmbown/DeepSeek-TUI/security/advisories/GHSA-wx44-2q6h-j6p8"
     },
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45311"
+    },
     {
       "type": "PACKAGE",
       "url": "https://github.com/Hmbown/DeepSeek-TUI"
@@ -94,6 +102,6 @@
     "severity": "CRITICAL",
     "github_reviewed": true,
     "github_reviewed_at": "2026-05-14T20:29:33Z",
-    "nvd_published_at": null
+    "nvd_published_at": "2026-05-28T18:16:35Z"
   }
 }