—

PYSEC-2021-24

Quick fix

PYSEC-2021-24 — matrix-sydent: upgrade to the fixed version with the command below.

pip install --upgrade 'matrix-sydent>=2.3.0'

Details

### Impact Missing input validation of some parameters on the endpoints used to confirm third-party identifiers could cause excessive use of disk space and memory leading to resource exhaustion. ### Patches Fixed by 3175fd3. ### Workarounds There are no known workarounds. ### References n/a ### For more information If you have any questions or comments about this advisory, email us at security@matrix.org.

Are you affected?

Enter the version of the package you're using.

Affected packages

PyPI/matrix-sydent

Introduced in: 0Fixed in: 2.3.0

Fixpip install --upgrade 'matrix-sydent>=2.3.0'

References

https://github.com/matrix-org/sydent/security/advisories/GHSA-pw4v-gr34-2553[ADVISORY]
https://pypi.org/project/matrix-sydent/[PACKAGE]