https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 21 Oct 2026 09:55:20 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-26315 EUVD-2026-26315 https://cve.radiocsirt.org/vuln/euvd-2026-26315 https://cve.radiocsirt.org/vuln/fkie_cve-2021-29431 <p>Sydent is a reference Matrix identity server. Sydent can be induced to send HTTP GET requests to internal systems, due to lack of parameter validation or IP address blacklisting. It is not possible to exfiltrate data or control request headers, but it might be possible to use the attack to perform an internal port enumeration. This issue has been addressed in in 9e57334, 8936925, 3d531ed, 0f00412. A potential workaround would be to use a firewall to ensure that Sydent cannot reach internal HTTP resources.</p> <p>Sydent is a reference Matrix identity server. Sydent can be induced to send HTTP GET requests to internal systems, due to lack of parameter validation or IP address blacklisting. It is not possible to exfiltrate data or control request headers, but it might be possible to use the attack to perform an internal port enumeration. This issue has been addressed in in 9e57334, 8936925, 3d531ed, 0f00412. A potential workaround would be to use a firewall to ensure that Sydent cannot reach internal HTTP resources.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-29431 https://cve.radiocsirt.org/vuln/ghsa-9jhm-8m8c-c3f4 <p><strong>Affected:</strong> PyPI: matrix-sydent</p> <p>### Impact</p> <p>Sydent can be induced to send HTTP GET requests to internal systems, due to lack of parameter validation or IP address blacklisting.</p> <p>It is not possible to exfiltrate data or control request headers, but it might be possible to use the attack to perform an internal port enumeration.</p> <p>### Patches</p> <p>Fixed in 9e57334, 8936925, 3d531ed, 0f00412</p> <p>### Workarounds</p> <p>A potential workaround would be to use a firewall to ensure that Sydent cannot reach internal HTTP resources.</p> <p>### For more information</p> <p>If you have any questions or comments about this advisory, email us at security@matrix.org.</p> <p><strong>Affected:</strong> PyPI: matrix-sydent</p> <p>### Impact</p> <p>Sydent can be induced to send HTTP GET requests to internal systems, due to lack of parameter validation or IP address blacklisting.</p> <p>It is not possible to exfiltrate data or control request headers, but it might be possible to use the attack to perform an internal port enumeration.</p> <p>### Patches</p> <p>Fixed in 9e57334, 8936925, 3d531ed, 0f00412</p> <p>### Workarounds</p> <p>A potential workaround would be to use a firewall to ensure that Sydent cannot reach internal HTTP resources.</p> <p>### For more information</p> <p>If you have any questions or comments about this advisory, email us at security@matrix.org.</p> https://cve.radiocsirt.org/vuln/ghsa-9jhm-8m8c-c3f4 https://cve.radiocsirt.org/vuln/gsd-2021-29431 gsd-2021-29431 https://cve.radiocsirt.org/vuln/gsd-2021-29431 https://cve.radiocsirt.org/vuln/pysec-2021-22 <p><strong>Affected:</strong> PyPI: matrix-sydent</p> <p>Sydent is a reference Matrix identity server. Sydent can be induced to send HTTP GET requests to internal systems, due to lack of parameter validation or IP address blacklisting. It is not possible to exfiltrate data or control request headers, but it might be possible to use the attack to perform an internal port enumeration. This issue has been addressed in in 9e57334, 8936925, 3d531ed, 0f00412. A potential workaround would be to use a firewall to ensure that Sydent cannot reach internal HTTP resources.</p> <p><strong>Affected:</strong> PyPI: matrix-sydent</p> <p>Sydent is a reference Matrix identity server. Sydent can be induced to send HTTP GET requests to internal systems, due to lack of parameter validation or IP address blacklisting. It is not possible to exfiltrate data or control request headers, but it might be possible to use the attack to perform an internal port enumeration. This issue has been addressed in in 9e57334, 8936925, 3d531ed, 0f00412. A potential workaround would be to use a firewall to ensure that Sydent cannot reach internal HTTP resources.</p> https://cve.radiocsirt.org/vuln/pysec-2021-22