HIGH7.5PyPI
PYSEC-2026-1225· CVE-2025-64508, GHSA-fc2v-vcwj-269vBugsink is vulnerable to unauthenticated remote DoS via crafted Brotli input
Modified: 7/7/2026
package
PyPI/bugsink
pkg:pypi/bugsink
—PyPI
PYSEC-2026-1226· CVE-2025-54433, GHSA-q78p-g86f-jg6qBugsink path traversal via event_id in ingestion
Modified: 7/7/2026
HIGH7.5PyPI
PYSEC-2026-1227· CVE-2025-64509, GHSA-rrx3-2x4g-mq2hBugsink is vulnerable to unauthenticated remote DoS via crafted Brotli input (via CPU)
Modified: 7/7/2026
MEDIUM4.3PyPI
PYSEC-2026-2402· CVE-2026-47728, GHSA-5389-f7vh-wxj8Bugsink: Project scoping missing in sourcemap and debug-file lookup
Modified: 7/13/2026
MEDIUM4.3PyPI
PYSEC-2026-2403· CVE-2026-53954, GHSA-5x67-j5xg-c5gjBugsink: DOS using large numbers of event tags
Modified: 7/13/2026
HIGH7.1PyPI
PYSEC-2026-2404· CVE-2026-40162, GHSA-8hw4-fhww-273gBugsink affected by authenticated arbitrary file write in artifactbundle/assemble
Modified: 7/13/2026
MEDIUM4.3PyPI
PYSEC-2026-2405· CVE-2026-44502, GHSA-fp53-qcf8-2xx2Bunsink has an SSRF bypass in `validate_webhook_url`
Modified: 7/13/2026
LOW3.1PyPI
PYSEC-2026-2406· CVE-2026-47716, GHSA-g5vc-q7qc-v939Bugsink: Issue bulk actions can affect another project’s issue if its UUID is known
Modified: 7/13/2026
LOW3.1PyPI
PYSEC-2026-2407· CVE-2026-47715, GHSA-vx2f-6m6h-9frfBugsink: Issue event views can show an event from another project if its UUID is known
Modified: 7/13/2026
CRITICAL9.3PyPI
PYSEC-2026-301· CVE-2026-27614, GHSA-vp6q-7m36-pq3wBugsink is vulnerable to Stored XSS via Pygments fallback in stacktrace rendering
Modified: 7/13/2026
MEDIUM4.3PyPI
GHSA-5389-f7vh-wxj8· CVE-2026-47728, PYSEC-2026-2402Bugsink: Project scoping missing in sourcemap and debug-file lookup
Modified: 7/13/2026
MEDIUM4.3PyPI
GHSA-5x67-j5xg-c5gj· CVE-2026-53954, PYSEC-2026-2403Bugsink: DOS using large numbers of event tags
Modified: 7/13/2026
HIGH7.1PyPI
GHSA-8hw4-fhww-273g· CVE-2026-40162, PYSEC-2026-2404Bugsink affected by authenticated arbitrary file write in artifactbundle/assemble
Modified: 7/13/2026
HIGH7.5PyPI
GHSA-fc2v-vcwj-269v· CVE-2025-64508, PYSEC-2026-1225Bugsink is vulnerable to unauthenticated remote DoS via crafted Brotli input
Modified: 7/7/2026
MEDIUM4.3PyPI
GHSA-fp53-qcf8-2xx2· CVE-2026-44502, PYSEC-2026-2405Bunsink has an SSRF bypass in `validate_webhook_url`
Modified: 7/13/2026
LOW3.1PyPI
GHSA-g5vc-q7qc-v939· CVE-2026-47716, PYSEC-2026-2406Bugsink: Issue bulk actions can affect another project’s issue if its UUID is known
Modified: 7/13/2026
HIGHPyPI
GHSA-q78p-g86f-jg6q· CVE-2025-54433, PYSEC-2026-1226Bugsink path traversal via event_id in ingestion
Modified: 7/7/2026
HIGH7.5PyPI
GHSA-rrx3-2x4g-mq2h· CVE-2025-64509, PYSEC-2026-1227Bugsink is vulnerable to unauthenticated remote DoS via crafted Brotli input (via CPU)
Modified: 7/7/2026
CRITICAL9.3PyPI
GHSA-vp6q-7m36-pq3w· CVE-2026-27614, PYSEC-2026-301Bugsink is vulnerable to Stored XSS via Pygments fallback in stacktrace rendering
Modified: 6/29/2026
LOW3.1PyPI
GHSA-vx2f-6m6h-9frf· CVE-2026-47715, PYSEC-2026-2407Bugsink: Issue event views can show an event from another project if its UUID is known
Modified: 7/13/2026