GCVE-110-PYPI-2026-014097

Advisory Published

Vulnetix · Advisory published July 7, 2026

[P-CURL-POST-DATA] curl POST with variable data (possible data exfiltration) — matched: curl -sS -X POST "$ERRORGAP_ENDPOINT/api/projects/$ERRORGAP_PROJECT_SLUG/notices" \

Download JSON Open in Console

Weaknesses (CWE)

CWE-506Embedded Malicious CodeCWE-200Exposure of Sensitive Information to an Unauthorized Actor

Affected Products

Vendor	Product	Versions	Platforms
pypi	errorgap	* (affected)	—

References

advisory

web

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON