GHSA-mh74-4m5g-fcjx
GitHub Security Advisory
Malicious users could abuse Sydent to control the content of invitation emails
✓ GitHub Reviewed
MODERATE
Has CVE
Advisory Details
### Impact
A malicious user could abuse Sydent to send out arbitrary emails from the Sydent email address. This could be used to construct plausible phishing emails, for example.
### Patches
Fixed in 4469d1d, 6b405a8, 65a6e91.
Note that these patches include changes to the *default* email templates. If these templates have been locally modified, they must also be updated.
### For more information
If you have any questions or comments about this advisory, email us at [email protected].
Affected Packages
PyPI
matrix-sydent
Affected versions:
0
(fixed in 2.3.0)
Related CVEs
Key Information
5.0
/10
Dataset
Last updated: November 25, 2025 6:29 AM
Data from GitHub Advisory Database. This information is provided for research and educational purposes.