Eidetic-Labs Stigmem
4 CVEs affecting Eidetic-Labs Stigmem. Latest disclosed: 2026-08-19. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-76239 | Medium | 6.3 | 2026-08-19 | Stigmem before 0.9.0a11 fails to validate the delivery_address parameter when creating webhook subscriptions, allowing authenticated users to specify internal… |
CVE-2026-76245 | | 2026-08-19 | stigmem (pip package stigmem-node) version 0.9.0a1 contains a timestamp-handling mismatch in federation peer-token validation that can cause valid peer tokens… | |
CVE-2026-76244 | | 2026-08-19 | stigmem-node contains an insecure default configuration vulnerability that allows federation traffic to traverse networks without mTLS protection when non-loop… | |
CVE-2026-76243 | | 2026-08-19 | stigmem versions before 0.9.0a2 allow unauthenticated access when authentication is disabled on non-loopback deployments. Attackers can perform read, write, an… |