Lucene search
+L

9 matches found

PyPA
PyPA
•added 2026/08/04 11:34 a.m.•35 views

pytonapi has a Webhook Custom Path Authentication Bypass

Webhook Custom Path Authentication Bypass in pytonapi SummaryTonapiWebhookDispatcher in pytonapi 2.2.0 fails to validate the Authorization header when a webhook handler is registered with the documented path= argument. During setup, bearer tokens are stored only under the default suffix paths e.g...

7.5CVSS5.8AI score0.00709EPSS
SaveExploits0References7Affected Software1
OSV
OSV
•added 2026/08/04 11:34 a.m.•14 views

PYSEC-2026-3614 pytonapi has a Webhook Custom Path Authentication Bypass

Webhook Custom Path Authentication Bypass in pytonapi Summary TonapiWebhookDispatcher in pytonapi 2.2.0 fails to validate the Authorization header when a webhook handler is registered with the documented path= argument. During setup, bearer tokens are stored only under the default suffix paths...

7.5CVSS5.8AI score0.00709EPSS
SaveExploits0References7
Cvelist
Cvelist
•added 2026/07/28 5:09 p.m.•45 views

CVE-2026-54635 pytonapi has a Webhook Custom Path Authentication Bypass

pytonapi is a Python SDK for TONAPI that provides REST API, streaming, and webhook access to the TON blockchain. From 2.0.0 to 2.2.0, TonapiWebhookDispatcher fails to validate the Authorization header when a webhook handler is registered with the documented path argument, because setup stores...

7.5CVSS0.00709EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2026/07/28 5:09 p.m.•13 views

CVE-2026-54635 pytonapi has a Webhook Custom Path Authentication Bypass

pytonapi is a Python SDK for TONAPI that provides REST API, streaming, and webhook access to the TON blockchain. From 2.0.0 to 2.2.0, TonapiWebhookDispatcher fails to validate the Authorization header when a webhook handler is registered with the documented path argument, because setup stores...

7.5CVSS6AI score0.00709EPSS
SaveExploits0References4
OSV
OSV
•added 2026/07/28 5:09 p.m.•11 views

CVE-2026-54635 pytonapi has a Webhook Custom Path Authentication Bypass

pytonapi is a Python SDK for TONAPI that provides REST API, streaming, and webhook access to the TON blockchain. From 2.0.0 to 2.2.0, TonapiWebhookDispatcher fails to validate the Authorization header when a webhook handler is registered with the documented path argument, because setup stores...

7.5CVSS6AI score
SaveExploits0References6
EUVD
EUVD
•added 2026/07/28 5:09 p.m.•15 views

EUVD-2026-49907

pytonapi is a Python SDK for TONAPI that provides REST API, streaming, and webhook access to the TON blockchain. From 2.0.0 to 2.2.0, TonapiWebhookDispatcher fails to validate the Authorization header when a webhook handler is registered with the documented path argument, because setup stores...

7.5CVSS6AI score0.00709EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
•added 2026/07/28 5:09 p.m.•24 views

pytonapi has a Webhook Custom Path Authentication Bypass

Webhook Custom Path Authentication Bypass in pytonapi Summary TonapiWebhookDispatcher in pytonapi 2.2.0 fails to validate the Authorization header when a webhook handler is registered with the documented path= argument. During setup, bearer tokens are stored only under the default suffix paths...

7.5CVSS6.1AI score0.00709EPSS
SaveExploits0References6Affected Software1
OSV
OSV
•added 2026/07/28 5:09 p.m.•18 views

GHSA-3FCR-JVGP-7F58 pytonapi has a Webhook Custom Path Authentication Bypass

Webhook Custom Path Authentication Bypass in pytonapi Summary TonapiWebhookDispatcher in pytonapi 2.2.0 fails to validate the Authorization header when a webhook handler is registered with the documented path= argument. During setup, bearer tokens are stored only under the default suffix paths...

7.5CVSS6.1AI score0.00709EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/28 12:00 a.m.•0 views

CVE-2026-54635: Improper Authentication

pytonapi is a Python SDK for TONAPI that provides REST API, streaming, and webhook access to the TON blockchain. From 2.0.0 to 2.2.0, TonapiWebhookDispatcher fails to validate the Authorization header when a webhook handler is registered with the documented path argument, because setup stores...

7.5CVSS5.9AI score0.00709EPSS
SaveExploits0References2
Rows per page
Query Builder