CVE-2026-52776
2 advisories.
PyPI/compliance-trestle CVE-2026-52776: high, EPSS 0.44%
compliance-trestle has an URLSecurityValidator SSRF allowlist bypass via IPv4-mapped IPv6 and 0.0.0.0
Action: Upgrade compliance-trestle to 4.1.0 or later.
pip install compliance-trestle==4.1.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.1.0 | - |
Fixed versions
| 4.1.0 |
Sources
- osv: GHSA-h47f-gmjp-m7rr
- https://github.com/oscal-compass/compliance-trestle/security/advisories/GHSA-h47f-gmjp-m7rr
- https://github.com/oscal-compass/compliance-trestle/commit/d107cd16efe8eb15d46be3c1d97f1ec73d32447c
- https://github.com/oscal-compass/compliance-trestle
CVE-2026-52776 · published · modified · JSON
PyPI/compliance-trestle CVE-2026-52776: unknown, EPSS 0.44%
compliance-trestle has an URLSecurityValidator SSRF allowlist bypass via IPv4-mapped IPv6 and 0.0.0.0
Action: Upgrade compliance-trestle to 4.1.0 or later.
pip install compliance-trestle==4.1.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.1.0 | - |
Fixed versions
| 4.1.0 |
Sources
- osv: PYSEC-2026-3659
- https://github.com/oscal-compass/compliance-trestle/security/advisories/GHSA-h47f-gmjp-m7rr
- https://github.com/oscal-compass/compliance-trestle/commit/d107cd16efe8eb15d46be3c1d97f1ec73d32447c
- https://github.com/oscal-compass/compliance-trestle
- https://pypi.org/project/compliance-trestle
- https://github.com/advisories/GHSA-h47f-gmjp-m7rr
- https://nvd.nist.gov/vuln/detail/CVE-2026-52776
CVE-2026-52776 · published · modified · JSON