misp-stix vulnerabilities

2 known vulnerabilities in misp-stix from MISP. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.7 High severity

  misp-stix: Uncontrolled Resource Consumption

  CVE-2026-77755Aug 21, 2026MISP

  A denial-of-service vulnerability was identified in misp-stix when processing attacker-controlled STIX 1 or STIX 2 documents. The STIX import code used sys.exit() to handle several parsing and loading failures. Because SystemExit inherits from BaseException ra

• 8.8 High severity

  misp-stix: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2026-77751Aug 21, 2026MISP

  A path traversal vulnerability existed in the handling of MISP object template names during STIX 2 import and MISP-to-STIX 2 export. MISP object names are passed to PyMISP's object-template resolution mechanism, which constructs a filesystem path by joining th