Executive brief
matrix-sydent and matrix-synapse Use Cryptographically Weak PRNG
Affected products
- PyPI matrix-sydent
- PyPI matrix-synapse
Junglewise Threat Intelligence
CVE-2019-11842: PYSEC-2026-2620 - matrix-sydent and matrix-synapse Use Cryptographically Weak PRNG
CVE-2019-11842 · Severity: low · CVSS 3 · Published 2026-07-09
Technologies: matrix-sydent (PyPI), matrix-synapse (PyPI). Vendors: PyPI.
Related threats
- PYSEC-2026-1612 - Synapse's invalid device keys degrade federation functionality
- PYSEC-2026-1614 - Synapse vulnerable to federation denial of service via malformed events
- PYSEC-2026-1610 - Synapse Matrix has a partial room state leak via Sliding Sync
- PYSEC-2026-1615 - Synapse can be forced to thumbnail unexpected file formats, invoking external, potentially untrustworthy decoders
- PYSEC-2026-1611 - Synapse allows a a malformed invite to break the invitee's `/sync`