PyPI/apprise CVE-2026-59180: low 3.1, EPSS 0.32%

Apprise forwards configured auth headers across cross-origin HTTP redirects

Action: Upgrade apprise to 1.11.0 or later.

pip install apprise==1.11.0

Affected

Fixed versions

Sources

• osv: PYSEC-2026-4200
• https://github.com/caronc/apprise/security/advisories/GHSA-856c-92hv-3vxx
• https://nvd.nist.gov/vuln/detail/CVE-2026-59180
• https://github.com/caronc/apprise/pull/1610
• https://github.com/caronc/apprise/commit/68c0aef218055e4586cf4605fd6b56358f5f462d
• https://github.com/caronc/apprise
• https://github.com/caronc/apprise/releases/tag/v1.11.0
• https://pypi.org/project/apprise
• https://github.com/advisories/GHSA-856c-92hv-3vxx

CVE-2026-59180 · published 2026-10-15T10:22:55.198617Z · modified 2026-10-15T14:45:07.014592420Z · JSON