PyPI/matrix-sydent CVE-2021-29430: high 7.5, EPSS 1.83%

Sydent vulnerable to denial of service attack via memory exhaustion

Action: Upgrade matrix-sydent to 2.3.0 or later.

pip install matrix-sydent==2.3.0

Affected

Fixed versions

Sources

• osv: GHSA-wmg4-8cp2-hpg9
• https://github.com/matrix-org/sydent/security/advisories/GHSA-wmg4-8cp2-hpg9
• https://nvd.nist.gov/vuln/detail/CVE-2021-29430
• https://github.com/matrix-org/sydent/commit/0523511d2fb40f2738f8a8549868f44b96e5dab7
• https://github.com/matrix-org/sydent/commit/89071a1a754c69a50deac89e6bb74002d4cda19d
• https://github.com/matrix-org/sydent/commit/f56eee315b6c44fdd9f6aa785cc2ec744a594428
• https://github.com/matrix-org/sydent
• https://github.com/matrix-org/sydent/releases/tag/v2.3.0
• https://github.com/pypa/advisory-database/tree/main/vulns/matrix-sydent/PYSEC-2021-21.yaml
• https://pypi.org/project/matrix-sydent

CVE-2021-29430 · published 2021-04-19T14:54:04Z · modified 2026-09-10T03:49:26.904044812Z · JSON