Skip to content
Threat Feed

Tag

Stigmem

2 briefs RSS
medium advisory

Stigmem-node Federation Peer Token Timestamp Validation Vulnerability

A timestamp handling issue in Stigmem-node's federation peer token validation could cause valid peer tokens to be incorrectly treated as expired, impacting availability and reliability of authenticated federation flows, affecting versions prior to 0.9.0a2.

stigmem-node stigmem token-validation authentication
1r 1t
critical advisory

Stigmem Node Authentication Bypass Vulnerability

Stigmem nodes configured with authentication disabled could grant broad read/write/federation capabilities if exposed outside a loopback-only local development environment, leading to privilege escalation if exposed to untrusted networks; version 0.9.0a2 addresses this issue by disabling unauthenticated operations outside of loopback environments.

stigmem-node authentication-bypass privilege-escalation stigmem
2r 1t