{"action":"Upgrade streampipes to 0.95.0 or later.","affected":[{"fixed":"0.95.0","introduced":"0"}],"component":"streampipes","cve_ids":["CVE-2024-31979"],"ecosystem":"PyPI","epss":0.00738,"exploited":false,"fixed_versions":["0.95.0"],"ghsa_id":"GHSA-9gr7-gh74-qg9x","id":"tcs_01M5KGM99S3REHHMV5YNJ6YB0E","modified_at":"2026-06-10T17:02:42.329222948Z","published_at":"2024-07-17T09:15:02Z","references":["https://osv.dev/vulnerability/PYSEC-2024-174","https://lists.apache.org/thread/8lryp3bxnby9kmk13odkz2jbfdjfvf0y","http://www.openwall.com/lists/oss-security/2024/07/16/11","https://github.com/advisories/GHSA-9gr7-gh74-qg9x"],"severity":{"label":"medium","score":4.3},"sources":[{"source":"osv","source_id":"PYSEC-2024-174","url":"https://osv.dev/vulnerability/PYSEC-2024-174"}],"summary":"Server-Side Request Forgery (SSRF) vulnerability in Apache StreamPipes during installation process of pipeline elements."}