CVE-2026-76239
1 advisory.
PyPI/stigmem-node CVE-2026-76239: medium 6.3
stigmem-node has blind SSRF via unvalidated webhook subscription delivery_address
Action: Upgrade stigmem-node to 0.9.0a11 or later.
pip install stigmem-node==0.9.0a11Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.9.0a11 | - |
Fixed versions
| 0.9.0a11 |
Sources
- osv: GHSA-5p3m-vhh6-9236
- https://github.com/eidetic-labs/stigmem/security/advisories/GHSA-5p3m-vhh6-9236
- https://github.com/eidetic-labs/stigmem/pull/726
- https://github.com/eidetic-labs/stigmem/commit/11637401d50629fef040382aee5af4571842c152
- https://github.com/eidetic-labs/stigmem/commit/2ff5be29291d1c042e00d57c5f9ef93650cc90e0
- https://github.com/eidetic-labs/stigmem
- https://github.com/eidetic-labs/stigmem/releases/tag/v0.9.0a11
CVE-2026-76239 · published · modified · JSON