Description
stigmem versions before 0.9.0a2 allow unauthenticated access when authentication is disabled on non-loopback deployments. Attackers can perform read, write, and federation operations with anonymous identity when nodes are exposed outside local development environments.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
eidetic-labs stigmem
Default version status: unaffected
0 to < 0.9.0a2affected0.9.0a2unaffected
pkg:pypi/stigmem-node