PyPI/streampipes CVE-2024-30471: low 3.7, EPSS 0.66%

Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in Apache StreamPipes in user self-registration.

Action: Upgrade streampipes to 0.95.0 or later.

pip install streampipes==0.95.0

Affected

Fixed versions

Sources

• osv: PYSEC-2024-172
• https://lists.apache.org/thread/8yodrmohgcybq900or3d4hc1msl230fr
• http://www.openwall.com/lists/oss-security/2024/07/16/9
• https://github.com/advisories/GHSA-2qph-v9p2-q2gv

CVE-2024-30471 · published 2024-07-17T09:15:02Z · modified 2026-06-10T17:02:41.801853544Z · JSON