If you've found a security vulnerability, please report it to [email protected].
For more information on our security disclosure policy, visit https://www.matrix.org/security-disclosure-policy/.
This repository was archived by the owner on Jul 21, 2025. It is now read-only.
Security: matrix-org/sydent
Security
SECURITY.md
-
Sydent does not verify email server certificatesGHSA-p6hw-wm59-3g5g published
Jul 31, 2023 by DMRobertsonLow -
Denial of service (via resource exhaustion) due to improper input validationGHSA-pw4v-gr34-2553 published
Apr 15, 2021 by richvdhLow -
Malicious users could control the content of invitation emailsGHSA-mh74-4m5g-fcjx published
Apr 15, 2021 by richvdhLow -
Denial of service attack via disk space or memory exhaustionGHSA-wmg4-8cp2-hpg9 published
Apr 15, 2021 by richvdhModerate -
SSRF due to missing validation of hostnamesGHSA-9jhm-8m8c-c3f4 published
Apr 15, 2021 by richvdhLow
Learn more about advisories related to matrix-org/sydent in the GitHub Advisory Database