catalystcoop-ferc-xbrl-extractor (>=0.6.1, <=0.8.4), catalystcoop-pudl (>=2022.11.30, <=2022.11.30.post1) +1 more potentially affected by CVE-2026-42796 via arelle-release (>=2.2.4, <=2.11.12)

arelle-release PYPI version =2.2.4, =0.6.1, =2022.11.30, =0.6.1a0, =0.7.0 Source cves: CVE-2026-42796 Source advisory: SNYK:PYTHON-ARELLERELEASE-16635954...

Missing Authentication for Critical Function

Overview arelle-release is an An open source XBRL platform. Affected versions of this package are vulnerable to Missing Authentication for Critical Function via the plugins parameter in the /rest/configure endpoint, which is processed without authentication or authorization. An attacker can execu...

catalystcoop-ferc-xbrl-extractor (>=0.6.1, <=0.8.4), catalystcoop-pudl (>=2022.11.30, <=2022.11.30.post1) +1 more potentially affected by CVE-2026-42796 via arelle-release (>=2.2.4, <=2.11.12)

arelle-release PYPI version =2.2.4, =0.6.1, =2022.11.30, =0.6.1a0, =0.7.0 Source cves: CVE-2026-42796 Source advisory: MEND:CVE-2026-42796...