VDB
KO

package

PyPI / stigmem-node

pkg:pypi/stigmem-node

HIGH PyPI
GHSA-9pc9-4crj-mhpj

stigmem-node's Postgres schema identifier handling required defensive quoting

Modified: 5/29/2026

CRITICAL PyPI
GHSA-9vp8-3hmv-8fgh

stigmem-node's federation peer registration lacked explicit out-of-band approval

Modified: 5/29/2026

CRITICAL PyPI
GHSA-fp6w-8wpg-74g5

stigmem-node: Auth-disabled deployments may grant broad anonymous access outside loopback

Modified: 5/29/2026

CRITICAL PyPI
GHSA-jmfc-hfjq-pxcp

stigmem-node's federation insecure transport settings may allow non-loopback cleartext federation

Modified: 5/29/2026

HIGH PyPI
GHSA-w7pm-9g55-mxfm

stigmem-node's unsigned plugin override could be enabled without a second explicit acknowledgment

Modified: 5/29/2026

HIGH PyPI
GHSA-xh5j-xjfq-qvvx

stigmem-node's federation peer token timestamp validation may reject valid peer tokens

Modified: 5/29/2026