PyPI/puncia CVE-2024-41124: low 3.8, EPSS 0.27%

[PUNCIA] [CWE-319] Cleartext Transmission of Sensitive Information via HTTP urls in `API_URLS`

Action: Upgrade puncia to 0.21 or later.

pip install puncia==0.21

Affected

Fixed versions

Sources

• osv: PYSEC-2026-1809
• https://github.com/ARPSyndicate/puncia/security/advisories/GHSA-rwcj-7jjp-4w38
• https://nvd.nist.gov/vuln/detail/CVE-2024-41124
• https://github.com/ARPSyndicate/puncia/issues/8
• https://github.com/ARPSyndicate/puncia/commit/033f3b68126eabbb2040ce16e2c3a2ce17437fbd
• https://github.com/ARPSyndicate/puncia/commit/033f3b68126eabbb2040ce16e2c3a2ce17437fbd#diff-3ec6c2de51e702726b23c452e3f4a899f6f4253af9fbf5be7254a5c1407ab526
• https://github.com/ARPSyndicate/puncia
• https://pypi.org/project/puncia
• https://github.com/advisories/GHSA-rwcj-7jjp-4w38

CVE-2024-41124 · published 2026-07-07T14:34:37.090719Z · modified 2026-07-07T17:48:03.485397229Z · JSON