PyPI/streampipes CVE-2024-24778: unknown, EPSS 0.69%

Improper privilege management in a REST interface allowed registered users to access unauthorized resources if the resource ID was know.

Action: Upgrade streampipes to 0.97.0 or later.

pip install streampipes==0.97.0

Affected

Fixed versions

Sources

• osv: PYSEC-2025-66
• https://lists.apache.org/thread/j14w6wghlwwrgfgc6hoz9f94fwxtlgzh
• http://www.openwall.com/lists/oss-security/2025/03/03/1
• https://github.com/advisories/GHSA-vm7w-2724-5m23

CVE-2024-24778 · published 2025-03-03T11:15:11Z · modified 2026-06-10T17:02:42.415099424Z · JSON