id: PYSEC-2021-24
details: '### Impact Missing input validation of some parameters on the endpoints
  used to confirm third-party identifiers could cause excessive use of disk space
  and memory leading to resource exhaustion. ### Patches Fixed by 3175fd3. ### Workarounds
  There are no known workarounds. ### References n/a ### For more information If you
  have any questions or comments about this advisory, email us at security@matrix.org.'
affected:
- package:
    name: matrix-sydent
    ecosystem: PyPI
    purl: pkg:pypi/matrix-sydent
  ranges:
  - type: ECOSYSTEM
    events:
    - introduced: "0"
    - fixed: 2.3.0
  versions:
  - 2.0.0
  - 2.0.1
  - 2.1.0
  - 2.2.0
references:
- type: ADVISORY
  url: https://github.com/matrix-org/sydent/security/advisories/GHSA-pw4v-gr34-2553
- type: PACKAGE
  url: https://pypi.org/project/matrix-sydent/
aliases:
- CVE-2021-29433
- GHSA-pw4v-gr34-2553
modified: "2021-04-22T17:17:00Z"
published: "2021-04-15T18:15:00Z"