CVE-2026-76238
1 advisory.
PyPI/stigmem-node CVE-2026-76238: high, EPSS 0.36%
stigmem-node: decay sweep expires and counts facts across all tenants (cross-tenant BOLA)
Action: Upgrade stigmem-node to 0.9.0a12 or later.
pip install stigmem-node==0.9.0a12Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.9.0a12 | - |
Fixed versions
| 0.9.0a12 |
Sources
- osv: GHSA-6gqw-jqv7-v88m
- https://github.com/eidetic-labs/stigmem/security/advisories/GHSA-6gqw-jqv7-v88m
- https://github.com/eidetic-labs/stigmem/pull/728
- https://github.com/eidetic-labs/stigmem
CVE-2026-76238 · published · modified · JSON