{"action":"Upgrade matrix-sydent to 2.3.0 or later.","affected":[{"fixed":"2.3.0","introduced":"0"}],"component":"matrix-sydent","cve_ids":["CVE-2021-29433"],"ecosystem":"PyPI","epss":0.00927,"exploited":false,"fixed_versions":["2.3.0"],"ghsa_id":"GHSA-pw4v-gr34-2553","id":"tcs_01M5KGBW0SPNZYSHKR3RH9MD7W","modified_at":"2023-11-08T04:05:33.835170Z","published_at":"2021-04-15T18:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2021-24","https://github.com/matrix-org/sydent/security/advisories/GHSA-pw4v-gr34-2553","https://pypi.org/project/matrix-sydent/"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2021-24","url":"https://osv.dev/vulnerability/PYSEC-2021-24"}],"summary":"### Impact Missing input validation of some parameters on the endpoints used to confirm third-party identifiers could cause excessive use of disk space and memory leading to resource exhaustion. ### P"}