Skip to content

Vendor

perryts vulnerabilities

2 published CVES affecting perryts, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
2
Critical
1
High
1
Medium
0
Low
0
Unscored
0
CISA KEV
0
Atom feed of perryts alerts

Products

Latest perryts CVEs

Newest publication first

  1. CVE-2026-53776 Perry < 0.5.1166 JWT Expiration Bypass via verify_decode

    Published
    CriticalCVSS 9.3 EPSS 0.36%

    Perry before 0.5.1166 contains a JWT validation vulnerability that allows remote attackers to bypass token expiration by exploiting the unconditional setting of validate_exp = false in the verify_decode helper within the stdlib JWT verification path. Attackers in possession of a...

  2. CVE-2026-53777 Perry < 0.5.1159 Path Traversal via ArtifactReady WebSocket

    Published
    HighCVSS 8.6 EPSS 0.47%

    Perry before 0.5.1159 contains a path traversal vulnerability that allows a malicious build server to write arbitrary content to any location writable by the running process by supplying unsanitized path components in the artifact_name field of ArtifactReady WebSocket messages. A...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.