Skip to content
OpenAdvisories

Package · PyPI

stigmem-node

10 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 6.3

    Stigmem before 0.9.0a11 SSRF via unvalidated webhook delivery_address

    Stigmem before 0.9.0a11 fails to validate the delivery_address parameter when creating webhook subscriptions, allowing authenticated users to specify internal loopback and private network destinations. Attackers can trigger matching fact-change events to caus…