Skip to content
OpenAdvisories

Product · eidetic-labs

stigmem-node

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.2
    CVE-2026-76238

    stigmem before 0.9.0a12 Cross-Tenant BOLA via decay sweep

    stigmem versions before 0.9.0a12 contain a broken object level authorization vulnerability in the decay sweep endpoint that allows authenticated attackers with write credentials for one tenant to execute decay operations affecting all tenants. Attackers can s…

    eidetic-labs stigmem-node stigmem-node PyPI
  • High 8.6
    CVE-2026-76237

    stigmem before 0.9.0a12 Cross-Tenant BOLA via quarantine

    stigmem-node before 0.9.0a12 contains a broken object level authorization (cross-tenant BOLA) vulnerability in the quarantine review endpoints. On multi-tenant deployments running the opt-in stigmem-plugin-multi-tenant, the list/count queries and _get_quarant…

    eidetic-labs stigmem-node stigmem-node PyPI
  • High 7.2
    CVE-2026-76236

    stigmem before 0.9.0a12 Cross-Tenant BOLA via Tombstones

    stigmem-node before 0.9.0a12 contains a cross-tenant broken object level authorization (BOLA) flaw in the RTBF (right-to-be-forgotten) tombstone mechanism. issue_tombstone defaulted the tenant to "default" instead of the caller's tenant, allowing deletion rec…

    eidetic-labs stigmem-node stigmem-node PyPI