CVE-2026-39413
2 advisories.
PyPI/lightrag-hku CVE-2026-39413: medium 4.2
lightrag-hku: JWT Algorithm Confusion Vulnerability
Action: Upgrade lightrag-hku to 1.4.14 or later.
pip install lightrag-hku==1.4.14Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.4.14 | - |
Fixed versions
| 1.4.14 |
Sources
- osv: GHSA-8ffj-4hx4-9pgf
- https://github.com/HKUDS/LightRAG/security/advisories/GHSA-8ffj-4hx4-9pgf
- https://nvd.nist.gov/vuln/detail/CVE-2026-39413
- https://github.com/HKUDS/LightRAG/commit/728f2e54509d93e0a44f929c7f83f2c88d6d291b
- https://github.com/HKUDS/LightRAG
CVE-2026-39413 · published · modified · JSON
PyPI/lightrag-hku CVE-2026-39413: medium 4.2
lightrag-hku: JWT Algorithm Confusion Vulnerability
Action: Upgrade lightrag-hku to 1.4.14 or later.
pip install lightrag-hku==1.4.14Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.4.14 | - |
Fixed versions
| 1.4.14 |
Sources
- osv: PYSEC-2026-2592
- https://github.com/HKUDS/LightRAG/security/advisories/GHSA-8ffj-4hx4-9pgf
- https://nvd.nist.gov/vuln/detail/CVE-2026-39413
- https://github.com/HKUDS/LightRAG/commit/728f2e54509d93e0a44f929c7f83f2c88d6d291b
- https://github.com/HKUDS/LightRAG
- https://pypi.org/project/lightrag-hku
- https://github.com/advisories/GHSA-8ffj-4hx4-9pgf
CVE-2026-39413 · published · modified · JSON