CVE-2026-76245

UNKNOWN 0.0

stigmem Federation Peer Token Timestamp Validation Bypass

CVSS Score

0.0

EPSS Score

0.0%

EPSS Percentile

0th

stigmem (pip package stigmem-node) version 0.9.0a1 contains a timestamp-handling mismatch in federation peer-token validation that can cause valid peer tokens to be incorrectly treated as expired. This affects the availability and reliability of authenticated federation flows on nodes using federation peer authentication paths. The issue is fixed in 0.9.0a2, which uses the canonical millisecond-based validation path.

CWE	CWE-345
Vendor	eidetic-labs
Product	stigmem
Published	Aug 19, 2026

Stay Ahead of the Next One

Get instant alerts for eidetic-labs stigmem

Be the first to know when new unknown vulnerabilities affecting eidetic-labs stigmem are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

eidetic-labs / stigmem

0 < 0.9.0a2

References

NVD ↗ CVE.org ↗ EPSS Data ↗

github.com: https://github.com/eidetic-labs/stigmem/security/advisories/GHSA-xh5j-xjfq-qvvx vulncheck.com: https://www.vulncheck.com/advisories/stigmem-federation-peer-token-timestamp-validation-bypass