CVE-2026-54785
2 advisories.
PyPI/gemini-bridge CVE-2026-54785: medium 6.2, EPSS 0.19%
gemini-bridge vulnerable to arbitrary local file read via consult_gemini_with_files inline mode
Action: Upgrade gemini-bridge to 1.3.1 or later.
pip install gemini-bridge==1.3.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.0.0 | 1.3.1 | - |
Fixed versions
| 1.3.1 |
Sources
- osv: GHSA-c5px-58j2-7fqp
- https://github.com/eLyiN/gemini-bridge/security/advisories/GHSA-c5px-58j2-7fqp
- https://github.com/eLyiN/gemini-bridge/pull/9
- https://github.com/eLyiN/gemini-bridge/commit/8f3b85afd02b692c4bc974b5176e12fb277ea801
- https://github.com/eLyiN/gemini-bridge
- https://github.com/eLyiN/gemini-bridge/releases/tag/v1.3.1
CVE-2026-54785 · published · modified · JSON
PyPI/gemini-bridge CVE-2026-54785: medium 6.2, EPSS 0.19%
gemini-bridge vulnerable to arbitrary local file read via consult_gemini_with_files inline mode
Action: Upgrade gemini-bridge to 1.3.1 or later.
pip install gemini-bridge==1.3.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.0.0 | 1.3.1 | - |
Fixed versions
| 1.3.1 |
Sources
- osv: PYSEC-2026-3574
- https://github.com/eLyiN/gemini-bridge/security/advisories/GHSA-c5px-58j2-7fqp
- https://github.com/eLyiN/gemini-bridge/pull/9
- https://github.com/eLyiN/gemini-bridge/commit/8f3b85afd02b692c4bc974b5176e12fb277ea801
- https://github.com/eLyiN/gemini-bridge
- https://github.com/eLyiN/gemini-bridge/releases/tag/v1.3.1
- https://pypi.org/project/gemini-bridge
- https://github.com/advisories/GHSA-c5px-58j2-7fqp
- https://nvd.nist.gov/vuln/detail/CVE-2026-54785
CVE-2026-54785 · published · modified · JSON