PyPI/streampipes CVE-2024-31979: medium 4.3, EPSS 0.74%

Apache StreamPipes has possibility of SSRF in pipeline element installation process

Action: Upgrade streampipes to 0.95.0 or later.

pip install streampipes==0.95.0

Affected

Fixed versions

Sources

• osv: GHSA-9gr7-gh74-qg9x
• https://nvd.nist.gov/vuln/detail/CVE-2024-31979
• https://github.com/apache/streampipes/commit/cd5a7b46e3383573f0f2b51da4b7306d4936aa3f
• https://github.com/apache/streampipes
• https://github.com/apache/streampipes/releases/tag/release%2F0.95.0
• https://github.com/pypa/advisory-database/tree/main/vulns/streampipes/PYSEC-2024-174.yaml
• https://lists.apache.org/thread/8lryp3bxnby9kmk13odkz2jbfdjfvf0y
• http://www.openwall.com/lists/oss-security/2024/07/16/11

CVE-2024-31979 · published 2024-07-17T09:30:49Z · modified 2025-01-21T18:46:25.832962Z · JSON