CVSS 3.1
8.8 highCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HCVE-2025-70887
High (8.8) in ralphje signify. EPSS 0.3% chance of exploitation in the next 30 days. Fixed in signify 0.9.2.
An issue in ralphje Signify before v.0.9.2 allows a remote attacker to escalate privileges via the signed_data.py and the context.py components
Severity
- EPSS
- 0.3% chance of exploitation in the next 30 days; higher than 28% of CVEs (scores of 2026-10-31)
- CWE
- CWE-269
- Published
- Modified
- Record from
- the NVD, synced
Affected
- ralphje:signify
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-p4hh-mq57-gq8x | PyPI | signify | <0.9.2 | 0.9.2 |
| PYSEC-2026-2278 | PyPI | signify | <0.9.2 | 0.9.2 |