CVE-2026-76236
1 advisory.
PyPI/stigmem-node CVE-2026-76236: high
stigmem-node: RTBF tombstones are mis-attributed and suppress reads tenant-blind (cross-tenant BOLA)
Action: Upgrade stigmem-node to 0.9.0a12 or later.
pip install stigmem-node==0.9.0a12Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.9.0a12 | - |
Fixed versions
| 0.9.0a12 |
Sources
- osv: GHSA-x26h-xmv8-gxf7
- https://github.com/eidetic-labs/stigmem/security/advisories/GHSA-x26h-xmv8-gxf7
- https://github.com/eidetic-labs/stigmem/pull/728
- https://github.com/eidetic-labs/stigmem
CVE-2026-76236 · published · modified · JSON