PyPI/stigmem-node CVE-2026-76241: high, EPSS 0.11%
stigmem-node's unsigned plugin override could be enabled without a second explicit acknowledgment
Action: Upgrade stigmem-node to 0.9.0a2 or later.
pip install stigmem-node==0.9.0a2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.9.0a2 | - |
Fixed versions
| 0.9.0a2 |
Sources
- osv: GHSA-w7pm-9g55-mxfm
- https://github.com/eidetic-labs/stigmem/security/advisories/GHSA-w7pm-9g55-mxfm
- https://github.com/eidetic-labs/stigmem
- https://github.com/eidetic-labs/stigmem/blob/v0.9.0a2/CHANGELOG.md#L14-L35
- https://github.com/eidetic-labs/stigmem/blob/v0.9.0a2/SECURITY.md
- https://github.com/eidetic-labs/stigmem/releases/tag/v0.9.0a2
CVE-2026-76241 · published · modified · JSON