PerryTS vulnerabilities
We track 2 vulnerabilities in PerryTS products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on June 16, 2026.
2vulnerabilities
1critical
1high
0exploited
8.6average CVSS score
Latest PerryTS vulnerabilities
- 9.1 Critical severity
Perry before 0.5.1166 contains a JWT validation vulnerability that allows remote attackers to…
Perry before 0.5.1166 contains a JWT validation vulnerability that allows remote attackers to bypass token expiration by exploiting the unconditional setting of validate_exp = false in the verify_decode helper within the stdlib JWT verification path. Attackers
- 8.1 High severity
perry: Improper Limitation of a Pathname to a Restricted Directory
Perry before 0.5.1159 contains a path traversal vulnerability that allows a malicious build server to write arbitrary content to any location writable by the running process by supplying unsanitized path components in the artifact_name field of ArtifactReady W