https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-24T23:24:37.011751+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-26352 EUVD-2026-26352 2026-10-24T23:24:37.015529+00:00 EUVD-2026-26352 https://cve.radiocsirt.org/vuln/fkie_cve-2021-29432 fkie_cve-2021-29432 2026-10-24T23:24:37.015564+00:00

Sydent is a reference matrix identity server. A malicious user could abuse Sydent to send out arbitrary emails from the Sydent email address. This could be used to construct plausible phishing emails, for example. This issue has been fixed in 4469d1d.

 https://cve.radiocsirt.org/vuln/ghsa-mh74-4m5g-fcjx GHSA-mh74-4m5g-fcjx — Malicious users could abuse Sydent to control the content of invitation emails 2026-10-24T23:24:37.015596+00:00

Affected: PyPI: matrix-sydent

### Impact

A malicious user could abuse Sydent to send out arbitrary emails from the Sydent email address. This could be used to construct plausible phishing emails, for example.

### Patches

Fixed in 4469d1d, 6b405a8, 65a6e91.

Note that these patches include changes to the *default* email templates. If these templates have been locally modified, they must also be updated.

### For more information

If you have any questions or comments about this advisory, email us at security@matrix.org.

 https://cve.radiocsirt.org/vuln/gsd-2021-29432 gsd-2021-29432 2026-10-24T23:24:37.015627+00:00 gsd-2021-29432 https://cve.radiocsirt.org/vuln/pysec-2021-23 PYSEC-2021-23 2026-10-24T23:24:37.015640+00:00

Affected: PyPI: matrix-sydent

Sydent is a reference matrix identity server. A malicious user could abuse Sydent to send out arbitrary emails from the Sydent email address. This could be used to construct plausible phishing emails, for example. This issue has been fixed in 4469d1d.