PyPI/kas CVE-2026-47192: low, EPSS 0.25%
kas's late signature validation may allow unnoticed repository manipulations
Action: Upgrade kas to 5.3 or later.
pip install kas==5.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 4.8 | 5.3 | - |
Fixed versions
| 5.3 |
Sources
- osv: GHSA-4vqc-wpwg-vh7j
- https://github.com/siemens/kas/security/advisories/GHSA-4vqc-wpwg-vh7j
- https://github.com/siemens/kas/security/advisories/GHSA-qjwp-hrq6-r26r
- https://github.com/siemens/kas/commit/4cb4a3d01122ffaec9feaae768a5814092f6f9b5
- https://github.com/siemens/kas/commit/5b2114becfc154b16ef496d24f8c2191a2297f57
- https://github.com/siemens/kas
CVE-2026-47192 · published · modified · JSON