Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: eidetic-labs stigmem-node 0.9.0a12 Clear all filters
TI-2026-53343 CVE-2026-76238 · GHSA-w3ff-rjv9-m452

stigmem before 0.9.0a12 Cross-Tenant BOLA via decay sweep

Priority LOW 34

stigmem versions before 0.9.0a12 contain a broken object level authorization vulnerability in the decay sweep endpoint that allows authenticated attackers with write credentials for one tenant to execute decay operations…

CVSS 4.0HIGH 7.2 Network Low privileges No interaction EPSS 0.00364 Published 2026-08-19 Fixed in 0.9.0a12 CWE-863
TI-2026-53342 CVE-2026-76237 · GHSA-w2cf-363h-rwff

stigmem before 0.9.0a12 Cross-Tenant BOLA via quarantine

Priority LOW 39

stigmem-node before 0.9.0a12 contains a broken object level authorization (cross-tenant BOLA) vulnerability in the quarantine review endpoints.

CVSS 4.0HIGH 8.6 Network Low privileges No interaction EPSS 0.00364 Published 2026-08-19 Fixed in 0.9.0a12 CWE-639
TI-2026-53341 CVE-2026-76236 · GHSA-77m3-9g4f-372v

stigmem before 0.9.0a12 Cross-Tenant BOLA via Tombstones

Priority LOW 32

stigmem-node before 0.9.0a12 contains a cross-tenant broken object level authorization (BOLA) flaw in the RTBF (right-to-be-forgotten) tombstone mechanism.

CVSS 4.0HIGH 7.2 Network Low privileges No interaction EPSS 0.00364 Published 2026-08-19 Fixed in 0.9.0a12 CWE-639