{"action":"Upgrade matrix-sydent to 2.3.0 or later.","affected":[{"fixed":"2.3.0","introduced":"0"}],"component":"matrix-sydent","cve_ids":["CVE-2021-29431"],"ecosystem":"PyPI","epss":0.01194,"exploited":false,"fixed_versions":["2.3.0"],"ghsa_id":"GHSA-9jhm-8m8c-c3f4","id":"tcs_01M5KFB1V4QYH9V43RXA4J7PF0","modified_at":"2026-09-10T03:49:03.074179988Z","published_at":"2021-04-19T14:54:15Z","references":["https://osv.dev/vulnerability/GHSA-9jhm-8m8c-c3f4","https://github.com/matrix-org/sydent/security/advisories/GHSA-9jhm-8m8c-c3f4","https://nvd.nist.gov/vuln/detail/CVE-2021-29431","https://github.com/matrix-org/sydent/commit/0f00412017f25619bc36c264b29ea96808bf310a","https://github.com/matrix-org/sydent/commit/3d531ed50d2fd41ac387f36d44d3fb2c62dd22d3","https://github.com/matrix-org/sydent/commit/8936925f561b0c352c2fa922d5097d7245aad00a","https://github.com/matrix-org/sydent/commit/9e573348d81df8191bbe8c266c01999c9d57cd5f","https://github.com/matrix-org/sydent","https://github.com/matrix-org/sydent/releases/tag/v2.3.0","https://github.com/pypa/advisory-database/tree/main/vulns/matrix-sydent/PYSEC-2021-22.yaml","https://pypi.org/project/matrix-sydent"],"severity":{"label":"high","score":7.7},"sources":[{"source":"osv","source_id":"GHSA-9jhm-8m8c-c3f4","url":"https://osv.dev/vulnerability/GHSA-9jhm-8m8c-c3f4"}],"summary":"SSRF in Sydent due to missing validation of hostnames"}