CVE-2026-53656
2 advisories.
PyPI/fiftyone CVE-2026-53656: medium 6.3, EPSS 0.12%
FiftyOne App server uses wildcard CORS (Access-Control-Allow-Origin: *), enabling cross-origin reads of local server data
Action: Upgrade fiftyone to 1.17.0 or later.
pip install fiftyone==1.17.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.17.0 | - |
Fixed versions
| 1.17.0 |
Sources
- osv: GHSA-q78p-hj9h-5466
- https://github.com/voxel51/fiftyone/security/advisories/GHSA-q78p-hj9h-5466
- https://github.com/voxel51/fiftyone/commit/7c5b92eec5c7c0210c0c8134351ced77d2800ae0
- https://github.com/voxel51/fiftyone
- https://github.com/voxel51/fiftyone/releases/tag/v1.17.0
CVE-2026-53656 · published · modified · JSON
PyPI/fiftyone CVE-2026-53656: medium 6.3, EPSS 0.12%
FiftyOne App server uses wildcard CORS (Access-Control-Allow-Origin: *), enabling cross-origin reads of local server data
Action: Upgrade fiftyone to 1.17.0 or later.
pip install fiftyone==1.17.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.17.0 | - |
Fixed versions
| 1.17.0 |
Sources
- osv: PYSEC-2026-3465
- https://github.com/voxel51/fiftyone/security/advisories/GHSA-q78p-hj9h-5466
- https://github.com/voxel51/fiftyone/commit/7c5b92eec5c7c0210c0c8134351ced77d2800ae0
- https://github.com/voxel51/fiftyone
- https://github.com/voxel51/fiftyone/releases/tag/v1.17.0
- https://pypi.org/project/fiftyone
- https://github.com/advisories/GHSA-q78p-hj9h-5466
- https://nvd.nist.gov/vuln/detail/CVE-2026-53656
CVE-2026-53656 · published · modified · JSON