Known Vulnerabilities for Stigmem by Eidetic-labs
Listed below are 10 of the newest known vulnerabilities associated with "Stigmem" by "Eidetic-labs".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-76245 json | stigmem (pip package stigmem-node) version 0.9.0a1 contains a timestamp-handling mismatch in federation peer-token validation... | Not Provided | 2026-08-19 | 2026-08-19 |
| CVE-2026-76244 json | stigmem-node contains an insecure default configuration vulnerability that allows federation traffic to traverse networks wit... | Not Provided | 2026-08-19 | 2026-08-19 |
| CVE-2026-76243 json | stigmem versions before 0.9.0a2 allow unauthenticated access when authentication is disabled on non-loopback deployments. Att... | Not Provided | 2026-08-19 | 2026-08-19 |
| CVE-2026-76242 json | stigmem-node 0.9.0a1 accepts federation peer key material during peer registration without a separate administrator out-of-ba... | Not Provided | 2026-08-19 | 2026-08-19 |
| CVE-2026-76241 json | stigmem-node 0.9.0a1 allows plugin signature enforcement to be disabled via a single configuration flag without a second expl... | Not Provided | 2026-08-19 | 2026-08-19 |
| CVE-2026-76240 json | stigmem-node 0.9.0a1 interpolates Postgres backend schema identifiers into SQL strings without defensive quoting. In the affe... | Not Provided | 2026-08-19 | 2026-08-19 |
| CVE-2026-76239 json | Stigmem before 0.9.0a11 fails to validate the delivery_address parameter when creating webhook subscriptions, allowing authen... | Not Provided | 2026-08-19 | 2026-08-19 |
| CVE-2026-76238 json | stigmem versions before 0.9.0a12 contain a broken object level authorization vulnerability in the decay sweep endpoint that a... | Not Provided | 2026-08-19 | 2026-08-19 |
| CVE-2026-76237 json | stigmem-node before 0.9.0a12 contains a broken object level authorization (cross-tenant BOLA) vulnerability in the quarantine... | Not Provided | 2026-08-19 | 2026-08-19 |
| CVE-2026-76236 json | stigmem-node before 0.9.0a12 contains a cross-tenant broken object level authorization (BOLA) flaw in the RTBF (right-to-be-f... | Not Provided | 2026-08-19 | 2026-08-19 |