{"action":"Upgrade matrix-sydent to 2.3.0 or later.","affected":[{"fixed":"2.3.0","introduced":"0"}],"component":"matrix-sydent","cve_ids":["CVE-2021-29432"],"ecosystem":"PyPI","epss":0.00934,"exploited":false,"fixed_versions":["2.3.0"],"ghsa_id":"GHSA-mh74-4m5g-fcjx","id":"tcs_01M5KFR41S64XS3MVJ19ZSS8W9","modified_at":"2026-09-10T03:49:03.750948873Z","published_at":"2021-04-19T14:54:24Z","references":["https://osv.dev/vulnerability/GHSA-mh74-4m5g-fcjx","https://github.com/matrix-org/sydent/security/advisories/GHSA-mh74-4m5g-fcjx","https://nvd.nist.gov/vuln/detail/CVE-2021-29432","https://github.com/matrix-org/sydent/commit/4469d1d42b2b1612b70638224c07e19623039c42","https://github.com/matrix-org/sydent/releases/tag/v2.3.0","https://github.com/pypa/advisory-database/tree/main/vulns/matrix-sydent/PYSEC-2021-23.yaml","https://pypi.org/project/matrix-sydent"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-mh74-4m5g-fcjx","url":"https://osv.dev/vulnerability/GHSA-mh74-4m5g-fcjx"}],"summary":"Malicious users could abuse Sydent to control the content of invitation emails"}