{"action":"Upgrade matrix-sydent to 2.3.0 or later.","affected":[{"fixed":"2.3.0","introduced":"0"}],"component":"matrix-sydent","cve_ids":["CVE-2021-29430"],"ecosystem":"PyPI","epss":0.01833,"exploited":false,"fixed_versions":["2.3.0"],"ghsa_id":"GHSA-wmg4-8cp2-hpg9","id":"tcs_01M5KGBP3PCMPMEVXV9G6VJYG4","modified_at":"2023-11-08T04:05:33.651530Z","published_at":"2021-04-15T21:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2021-21","https://github.com/matrix-org/sydent/commit/0523511d2fb40f2738f8a8549868f44b96e5dab7","https://github.com/matrix-org/sydent/commit/89071a1a754c69a50deac89e6bb74002d4cda19d","https://github.com/matrix-org/sydent/commit/f56eee315b6c44fdd9f6aa785cc2ec744a594428","https://github.com/matrix-org/sydent/security/advisories/GHSA-wmg4-8cp2-hpg9","https://pypi.org/project/matrix-sydent/","https://github.com/matrix-org/sydent/releases/tag/v2.3.0"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2021-21","url":"https://osv.dev/vulnerability/PYSEC-2021-21"}],"summary":"Sydent is a reference Matrix identity server. Sydent does not limit the size of requests it receives from HTTP clients. A malicious user could send an HTTP request with a very large body, leading to m"}