PyPI/stigmem-node CVE-2026-76240: high, EPSS 0.38%
stigmem-node's Postgres schema identifier handling required defensive quoting
Action: Upgrade stigmem-node to 0.9.0a2 or later.
pip install stigmem-node==0.9.0a2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.9.0a2 | - |
Fixed versions
| 0.9.0a2 |
Sources
- osv: GHSA-9pc9-4crj-mhpj
- https://github.com/eidetic-labs/stigmem/security/advisories/GHSA-9pc9-4crj-mhpj
- https://github.com/eidetic-labs/stigmem
- https://github.com/eidetic-labs/stigmem/blob/v0.9.0a2/CHANGELOG.md#L14-L35
- https://github.com/eidetic-labs/stigmem/blob/v0.9.0a2/SECURITY.md
- https://github.com/eidetic-labs/stigmem/releases/tag/v0.9.0a2
CVE-2026-76240 · published · modified · JSON