Signify allows a remote attacker to escalate privileges via the signed_data.py and the context.py components

높음 8.8CVE-2025-70887 · GHSA-p4hh-mq57-gq8x · PYSEC-2026-2278 · Published 25/03/2026 · updated 17/06/2026

요약

Package	Affected versions	Patched versions
signify PyPI	`< 0.9.2`	`0.9.2`
signify ralphje	`< 0.9.2`	`0.9.2`

An issue in ralphje Signify before v.0.9.2 allows a remote attacker to escalate privileges via the signed_data.py and the context.py components

NVD description

An issue in ralphje Signify before v.0.9.2 allows a remote attacker to escalate privileges via the signed_data.py and the context.py components

Running one of these products? Scan your site to see whether it exposes a vulnerable version.