PyPI/wooey CVE-2026-7142: medium 6.3, EPSS 0.21%

Wooey has an Incorrect Privilege Assignment issue

Action: Upgrade wooey to 0.13.3rc1 or later.

pip install wooey==0.13.3rc1

Affected

Fixed versions

Sources

• osv: GHSA-w65c-cmxj-qrhm
• https://nvd.nist.gov/vuln/detail/CVE-2026-7142
• https://github.com/wooey/Wooey/issues/408
• https://github.com/wooey/Wooey/pull/407
• https://github.com/wooey/Wooey/commit/f7846fc0c323da8325422cab32623491757f1b88
• https://github.com/wooey/Wooey
• https://github.com/wooey/Wooey/releases/tag/v0.13.3rc1
• https://vuldb.com/submit/801533
• https://vuldb.com/vuln/359741
• https://vuldb.com/vuln/359741/cti

CVE-2026-7142 · published 2026-04-27T18:32:09Z · modified 2026-07-13T16:43:20.359137021Z · JSON