Read the docs

PerryTS

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

PerryTS records in CISA KEV

No PerryTS vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2026-38775 CVE-2026-53777

Perry < 0.5.1159 Path Traversal via ArtifactReady WebSocket

Priority HIGH 72

Perry before 0.5.1159 contains a path traversal vulnerability that allows a malicious build server to write arbitrary content to any location writable by the running process by supplying unsanitized path components in th…

CVSS 4.0HIGH 8.6 Network No auth User interaction EPSS 0.00467 Published 2026-06-11 Fixed in 0.5.1159 CWE-22
TI-2026-38774 CVE-2026-53776

Perry < 0.5.1166 JWT Expiration Bypass via verify_decode

Priority MEDIUM 48

Perry before 0.5.1166 contains a JWT validation vulnerability that allows remote attackers to bypass token expiration by exploiting the unconditional setting of validate_exp = false in the verify_decode helper within the…

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00357 Published 2026-06-16 Fixed in 0.5.1166 CWE-613
Open these records in search →