Executive brief
Bugsink is vulnerable to Stored XSS via Pygments fallback in stacktrace rendering
Affected products
- PyPI bugsink
Junglewise Threat Intelligence
CVE-2026-27614: PYSEC-2026-301 - Bugsink is vulnerable to Stored XSS via Pygments fallback in stacktrace rendering
CVE-2026-27614 · Severity: low · CVSS 3.1 · Published 2026-06-29
Technologies: bugsink (PyPI). Vendors: PyPI.
Related threats
- Bugsink denial of service via excessive event tags
- PYSEC-2026-1227 - Bugsink is vulnerable to unauthenticated remote DoS via crafted Brotli input (via CPU)
- PYSEC-2026-1225 - Bugsink is vulnerable to unauthenticated remote DoS via crafted Brotli input
- PYSEC-2026-1226 - Bugsink path traversal via event_id in ingestion
- Bugsink missing project scoping in sourcemap and debug file lookup