{"action":"Upgrade matrix-sydent to 2.3.0 or later.","affected":[{"fixed":"2.3.0","introduced":"0"}],"component":"matrix-sydent","cve_ids":["CVE-2021-29432"],"ecosystem":"PyPI","epss":0.00934,"exploited":false,"fixed_versions":["2.3.0"],"ghsa_id":"GHSA-mh74-4m5g-fcjx","id":"tcs_01M5KGBSZ3VFP8VX9J2KAW0KCH","modified_at":"2023-11-08T04:05:33.772633Z","published_at":"2021-04-15T21:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2021-23","https://github.com/matrix-org/sydent/security/advisories/GHSA-mh74-4m5g-fcjx","https://github.com/matrix-org/sydent/commit/4469d1d42b2b1612b70638224c07e19623039c42","https://pypi.org/project/matrix-sydent/","https://github.com/matrix-org/sydent/releases/tag/v2.3.0"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2021-23","url":"https://osv.dev/vulnerability/PYSEC-2021-23"}],"summary":"Sydent is a reference matrix identity server. A malicious user could abuse Sydent to send out arbitrary emails from the Sydent email address. This could be used to construct plausible phishing emails,"}