Skip to content
OpenAdvisories

Package · PyPI

firefighter-incident

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Critical 9.9
    CVE-2026-42864

    FireFighter: Unauthenticated SSRF in Raid jira_bot endpoint allows IAM credential theft

    FireFighter is an incident management application. Prior to 0.0.54, the POST /api/v2/firefighter/raid/jira_bot endpoint (CreateJiraBotView) is reachable without authentication (permission_classes = [permissions.AllowAny]). Its attachments payload is fetched s…

    ManoManoTech firefighter-incident firefighter-incident PyPI