PyPI/bugsink CVE-2025-54433: high 7.2, EPSS 0.61%

Bugsink path traversal via event_id in ingestion

Action: Upgrade bugsink to 1.4.3 or later.

pip install bugsink==1.4.3

pip install bugsink==1.5.5

pip install bugsink==1.6.4

pip install bugsink==1.7.4

Affected

Fixed versions

Sources

• osv: PYSEC-2026-1226
• nvd: CVE-2025-54433
• https://github.com/bugsink/bugsink/security/advisories/GHSA-q78p-g86f-jg6q
• https://github.com/bugsink/bugsink/commit/1001726f4389e982c486cdd5fa81941cb46cfc33
• https://github.com/bugsink/bugsink/commit/211ddf76758c808c095b5f836c363f148d934d21
• https://github.com/bugsink/bugsink/commit/2c41fbe3881bdea83399a7f9fdc8cff198ae089f
• https://github.com/bugsink/bugsink/commit/53cf1a17a3e96f7c83c7451fd56f980a09d0c9b0
• https://github.com/bugsink/bugsink/commit/55a155003d0b416ea008c5e7dcde85130ad21d9b
• https://github.com/bugsink/bugsink/commit/b94aa8a5c96ce8cdd9711b6beb4e518264993ac2
• https://github.com/bugsink/bugsink/commit/c341687bd655543730c812db35c29199f788be6b
• https://github.com/bugsink/bugsink/commit/c87217bd565122ba70af90436e3ab2cd9bee658f
• https://github.com/bugsink/bugsink
• https://pypi.org/project/bugsink
• https://github.com/advisories/GHSA-q78p-g86f-jg6q

CVE-2025-54433 · published 2026-07-07T16:02:59.100727Z · modified 2026-07-07T17:47:33.598285954Z · JSON