https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T23:00:18.597582+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2019-11340 CVE-2019-11340 2026-10-02T23:00:18.599463+00:00

util/emailutils.py in Matrix Sydent before 1.0.2 mishandles registration restrictions that are based on e-mail domain, if the allowed_local_3pids option is enabled. This occurs because of potentially unwanted behavior in Python, in which an email.utils.parseaddr call on user@bad.example.net@good.example.com returns the user@bad.example.net substring.

 https://cve.radiocsirt.org/vuln/ghsa-q9h8-gpw5-c95c GHSA-q9h8-gpw5-c95c — Matrix Sydent mishandles emails 2026-10-02T23:00:18.599512+00:00

Affected: PyPI: matrix-sydent

util/emailutils.py in Matrix Sydent before 1.0.2 mishandles registration restrictions that are based on e-mail domain, if the allowed_local_3pids option is enabled. This occurs because of potentially unwanted behavior in Python, in which an email.utils.parseaddr call on user@bad.example.net@good.example.com returns the user@bad.example.net substring.