HIGH7.7PyPI
GHSA-9jhm-8m8c-c3f4· CVE-2021-29431, PYSEC-2021-22SSRF in Sydent due to missing validation of hostnames
Modified: 9/10/2026
package
PyPI/matrix-sydent
pkg:pypi/matrix-sydent
HIGH7.5PyPI
GHSA-gwf7-vfjf-wf6x· CVE-2019-11842, PYSEC-2019-185matrix-sydent and matrix-synapse Use Cryptographically Weak PRNG
Modified: 7/13/2026
MEDIUM5.3PyPI
GHSA-mh74-4m5g-fcjx· CVE-2021-29432, PYSEC-2021-23Malicious users could abuse Sydent to control the content of invitation emails
Modified: 9/10/2026
CRITICAL9.3PyPI
GHSA-p6hw-wm59-3g5g· CVE-2023-38686, PYSEC-2023-139Sydent does not verify email server certificates
Modified: 9/10/2026
MEDIUM4.3PyPI
GHSA-pw4v-gr34-2553· CVE-2021-29433, PYSEC-2021-24Sydent DoS (via resource exhaustion) due to improper input validation
Modified: 9/10/2026
MEDIUM5.9PyPI
GHSA-q9h8-gpw5-c95c· CVE-2019-11340, PYSEC-2026-843Matrix Sydent mishandles emails
Modified: 7/7/2026
HIGH7.5PyPI
GHSA-wmg4-8cp2-hpg9· CVE-2021-29430, PYSEC-2021-21Sydent vulnerable to denial of service attack via memory exhaustion
Modified: 9/10/2026
—PyPI
PYSEC-2021-21· CVE-2021-29430, GHSA-wmg4-8cp2-hpg9Modified: 11/8/2023
—PyPI
PYSEC-2021-22· CVE-2021-29431, GHSA-9jhm-8m8c-c3f4Modified: 11/8/2023
—PyPI
PYSEC-2021-23· CVE-2021-29432, GHSA-mh74-4m5g-fcjxModified: 11/8/2023
—PyPI
PYSEC-2021-24· CVE-2021-29433, GHSA-pw4v-gr34-2553Modified: 11/8/2023
MEDIUM5.3PyPI
PYSEC-2023-139· CVE-2023-38686, GHSA-p6hw-wm59-3g5gModified: 11/8/2023
HIGH7.5PyPI
PYSEC-2026-2620· CVE-2019-11842, GHSA-gwf7-vfjf-wf6xmatrix-sydent and matrix-synapse Use Cryptographically Weak PRNG
Modified: 7/13/2026
MEDIUM5.9PyPI
PYSEC-2026-843· CVE-2019-11340, GHSA-q9h8-gpw5-c95cMatrix Sydent mishandles emails
Modified: 7/7/2026