{"action":"Upgrade stigmem-node to 0.9.0a11 or later.","affected":[{"fixed":"0.9.0a11","introduced":"0"}],"component":"stigmem-node","cve_ids":["CVE-2026-76239"],"ecosystem":"PyPI","epss":0.00324,"exploited":false,"fixed_versions":["0.9.0a11"],"ghsa_id":"GHSA-5p3m-vhh6-9236","id":"tcs_01M5KF1DG515GAPJ0RJMSRJER3","modified_at":"2026-08-20T18:45:13.462126527Z","published_at":"2026-08-20T18:30:50Z","references":["https://osv.dev/vulnerability/GHSA-5p3m-vhh6-9236","https://github.com/eidetic-labs/stigmem/security/advisories/GHSA-5p3m-vhh6-9236","https://github.com/eidetic-labs/stigmem/pull/726","https://github.com/eidetic-labs/stigmem/commit/11637401d50629fef040382aee5af4571842c152","https://github.com/eidetic-labs/stigmem/commit/2ff5be29291d1c042e00d57c5f9ef93650cc90e0","https://github.com/eidetic-labs/stigmem","https://github.com/eidetic-labs/stigmem/releases/tag/v0.9.0a11"],"severity":{"label":"medium","score":6.3},"sources":[{"source":"osv","source_id":"GHSA-5p3m-vhh6-9236","url":"https://osv.dev/vulnerability/GHSA-5p3m-vhh6-9236"}],"summary":"stigmem-node has blind SSRF via unvalidated webhook subscription delivery_address"}