GHSA-vp6q-7m36-pq3w
Critical · 9.3CVSS
9.3
EPSS
—
Published
Feb 25, 2026
CISA due date
—
The record
Bugsink is vulnerable to Stored XSS via Pygments fallback in stacktrace rendering
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| PyPI | bugsink | 0 | 2.0.13 |
Related vulnerabilities
- CVE-2026-27614 Bugsink is a self-hosted error tracking tool. Same vulnerability
- GHSA-rrx3-2x4g-mq2h Bugsink is vulnerable to unauthenticated remote DoS via crafted Brotli input (via CPU) Also affects bugsink
- GHSA-fc2v-vcwj-269v Bugsink is vulnerable to unauthenticated remote DoS via crafted Brotli input Also affects bugsink
- CVE-2025-64508 Bugsink is a self-hosted error tracking tool. Also affects bugsink
- CVE-2025-64509 Bugsink is a self-hosted error tracking tool. Also affects bugsink
- CVE-2026-96379 Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting")… CWE-79
- CVE-2026-96382 Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting")… CWE-79
- CVE-2026-96368 Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting")… CWE-79