CVE-2026-42864
2 advisories.
PyPI/firefighter-incident CVE-2026-42864: critical 9.9
FireFighter has unauthenticated SSRF in its Raid jira_bot endpoint that allows IAM credential theft
Action: Upgrade firefighter-incident to 0.0.54 or later.
pip install firefighter-incident==0.0.54Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.0.54 | - |
Fixed versions
| 0.0.54 |
Sources
- osv: GHSA-fqvv-jvhr-g5jc
- https://github.com/ManoManoTech/firefighter-incident/security/advisories/GHSA-fqvv-jvhr-g5jc
- https://nvd.nist.gov/vuln/detail/CVE-2026-42864
- https://github.com/ManoManoTech/firefighter-incident/commit/2586679e6f32c12d223668b73e98f4c4de7b771f
- https://github.com/ManoManoTech/firefighter-incident
CVE-2026-42864 · published · modified · JSON
PyPI/firefighter-incident CVE-2026-42864: critical 9.9
FireFighter has unauthenticated SSRF in its Raid jira_bot endpoint that allows IAM credential theft
Action: Upgrade firefighter-incident to 0.0.54 or later.
pip install firefighter-incident==0.0.54Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.0.54 | - |
Fixed versions
| 0.0.54 |
Sources
- osv: PYSEC-2026-339
- https://github.com/ManoManoTech/firefighter-incident/security/advisories/GHSA-fqvv-jvhr-g5jc
- https://nvd.nist.gov/vuln/detail/CVE-2026-42864
- https://github.com/ManoManoTech/firefighter-incident/commit/2586679e6f32c12d223668b73e98f4c4de7b771f
- https://github.com/ManoManoTech/firefighter-incident
- https://pypi.org/project/firefighter-incident
- https://github.com/advisories/GHSA-fqvv-jvhr-g5jc
CVE-2026-42864 · published · modified · JSON