St2 (Stackstorm) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 11 known versions, newest CVE from 2026-09-04. Vendor: Stackstorm.

CVEs of St2

• CVE-2026-85514 - CVSS 6.3 (medium), 2026-09-04: A security vulnerability has been detected in StackStorm st2 up to 3.9.0. Impacted is an unknown function of the file st2api/st2api/controllers/v1/auth.py of…
• CVE-2026-85513 - CVSS 6.3 (medium), 2026-09-04: A weakness has been identified in StackStorm st2 up to 3.9.0. This issue affects the function assert_user_is_admin_if_user_query_param_is_provided of the file…