Description
Sydent is a reference Matrix identity server. In Sydent versions 2.2.0 and prior, sissing input validation of some parameters on the endpoints used to confirm third-party identifiers could cause excessive use of disk space and memory leading to resource exhaustion. A patch for the vulnerability is in version 2.3.0. No workarounds are known to exist.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| matrix-org | sydent | <= 2.2.0 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | matrix-sydent | < 2.3.0 | 2.3.0 | GHSA-pw4v-gr34-2553 |