PyPI/kas CVE-2026-47191: low, EPSS 0.25%
kas checks out SHA-like git branches as valid commits
Action: Upgrade kas to 5.3 or later.
pip install kas==5.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 5.3 | - |
Fixed versions
| 5.3 |
Sources
- osv: GHSA-qjwp-hrq6-r26r
- https://github.com/siemens/kas/security/advisories/GHSA-qjwp-hrq6-r26r
- https://github.com/siemens/kas/commit/4cb4a3d01122ffaec9feaae768a5814092f6f9b5
- https://github.com/siemens/kas
CVE-2026-47191 · published · modified · JSON