1 line
774 B
JSON
1 line
774 B
JSON
{"ghsa": "GHSA-fqvv-jvhr-g5jc", "cve": "CVE-2026-42864", "repo": "ManoManoTech/firefighter-incident", "severity": "critical", "cwes": ["CWE-306", "CWE-918"], "summary": "FireFighter has unauthenticated SSRF in its Raid jira_bot endpoint that allows IAM credential theft", "fix_commit": "2586679e6f32c12d223668b73e98f4c4de7b771f", "parent_commit": "59680ef1299b0169c18c81463db4a1ae7034b9b7", "vuln_files": ["src/firefighter/raid/serializers.py", "src/firefighter/raid/views/__init__.py"], "vuln_lines": {"src/firefighter/raid/serializers.py": [254, 255, 256, 257, 258, 259, 260, 261, 262, 263, 264], "src/firefighter/raid/views/__init__.py": [76]}, "published": "2026-05-05T18:21:17Z", "source_files": 21, "scope_dirs": ["src/firefighter/raid", "src/firefighter/raid/views"]} |