PyPI/streampipes CVE-2024-31979: medium 4.3, EPSS 0.74%

Server-Side Request Forgery (SSRF) vulnerability in Apache StreamPipes during installation process of pipeline elements.

Action: Upgrade streampipes to 0.95.0 or later.

pip install streampipes==0.95.0

Affected

Fixed versions

Sources

• osv: PYSEC-2024-174
• https://lists.apache.org/thread/8lryp3bxnby9kmk13odkz2jbfdjfvf0y
• http://www.openwall.com/lists/oss-security/2024/07/16/11
• https://github.com/advisories/GHSA-9gr7-gh74-qg9x

CVE-2024-31979 · published 2024-07-17T09:15:02Z · modified 2026-06-10T17:02:42.329222948Z · JSON