Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: PerryTS Clear all filters
TI-2026-38774 CVE-2026-53776

Perry < 0.5.1166 JWT Expiration Bypass via verify_decode

Priority MEDIUM 48

Perry before 0.5.1166 contains a JWT validation vulnerability that allows remote attackers to bypass token expiration by exploiting the unconditional setting of validate_exp = false in the verify_decode helper within the…

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00357 Published 2026-06-16 Fixed in 0.5.1166 CWE-613
TI-2026-38775 CVE-2026-53777

Perry < 0.5.1159 Path Traversal via ArtifactReady WebSocket

Priority HIGH 72

Perry before 0.5.1159 contains a path traversal vulnerability that allows a malicious build server to write arbitrary content to any location writable by the running process by supplying unsanitized path components in th…

CVSS 4.0HIGH 8.6 Network No auth User interaction EPSS 0.00467 Published 2026-06-11 Fixed in 0.5.1159 CWE-22