CVE-2026-76245
1 advisory.
PyPI/stigmem-node CVE-2026-76245: high
stigmem-node's federation peer token timestamp validation may reject valid peer tokens
Action: Upgrade stigmem-node to 0.9.0a2 or later.
pip install stigmem-node==0.9.0a2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.9.0a2 | - |
Fixed versions
| 0.9.0a2 |
Sources
- osv: GHSA-xh5j-xjfq-qvvx
- https://github.com/eidetic-labs/stigmem/security/advisories/GHSA-xh5j-xjfq-qvvx
- https://github.com/eidetic-labs/stigmem
- https://github.com/eidetic-labs/stigmem/blob/v0.9.0a2/CHANGELOG.md#L14-L35
- https://github.com/eidetic-labs/stigmem/blob/v0.9.0a2/SECURITY.md
- https://github.com/eidetic-labs/stigmem/releases/tag/v0.9.0a2
CVE-2026-76245 · published · modified · JSON