https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T12:53:20.635520+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-30466 EUVD-2026-30466 2026-10-08T12:53:20.724818+00:00 EUVD-2026-30466 https://cve.radiocsirt.org/vuln/fkie_cve-2021-39229 fkie_cve-2021-39229 2026-10-08T12:53:20.724863+00:00

Apprise is an open source library which allows you to send a notification to almost all of the most popular notification services available. In affected versions users who use Apprise granting them access to the IFTTT plugin (which just comes out of the box) are subject to a denial of service attack on an inefficient regular expression. The vulnerable regular expression is [here](https://github.com/caronc/apprise/blob/0007eade20934ddef0aba38b8f1aad980cfff253/apprise/plugins/NotifyIFTTT.py#L356-L359). The problem has been patched in release version 0.9.5.1. Users who are unable to upgrade are advised to remove `apprise/plugins/NotifyIFTTT.py` to eliminate the service.

 https://cve.radiocsirt.org/vuln/ghsa-qhmp-h54x-38qr GHSA-qhmp-h54x-38qr — Apprise vulnerable to regex injection with IFTTT Plugin 2026-10-08T12:53:20.724902+00:00

Affected: PyPI: apprise

### Impact Anyone _publicly_ hosting the Apprise library and granting them access to the IFTTT notification service.

### Patches Update to Apprise v0.9.5.1 ```bash # Install Apprise v0.9.5.1 from PyPI pip install apprise==0.9.5.1 ```

The patch to the problem was performed [here](https://github.com/caronc/apprise/pull/436/files).

### Workarounds Alternatively, if upgrading is not an option, you can safely remove the following file: - `apprise/plugins/NotifyIFTTT.py`

The above will eliminate the ability to use IFTTT, but everything else will work smoothly.

### For more information If you have any questions or comments about this advisory: * Open an issue in [Apprise](https://github.com/caronc/apprise/issues) * Email me at [lead2gold@gmail.com](mailto:lead2gold@gmail.com)

### Additional Credit Github would not allow me to additionally credit **Rasmus Petersen**, but I would like to put that here at the very least - thank you for finding and reporting this issue along with those already credited

## Additional Notes: - Github would not allow me to add/tag the 2 CWE's this issue is applicable to (only CWE-400). The other is: CWE-730 (placed in the title)

 https://cve.radiocsirt.org/vuln/gsd-2021-39229 gsd-2021-39229 2026-10-08T12:53:20.724942+00:00 gsd-2021-39229 https://cve.radiocsirt.org/vuln/pysec-2021-327 PYSEC-2021-327 2026-10-08T12:53:20.724955+00:00

Affected: PyPI: apprise

Apprise is an open source library which allows you to send a notification to almost all of the most popular notification services available. In affected versions users who use Apprise granting them access to the IFTTT plugin (which just comes out of the box) are subject to a denial of service attack on an inefficient regular expression. The vulnerable regular expression is [here](https://github.com/caronc/apprise/blob/0007eade20934ddef0aba38b8f1aad980cfff253/apprise/plugins/NotifyIFTTT.py#L356-L359). The problem has been patched in release version 0.9.5.1. Users who are unable to upgrade are advised to remove `apprise/plugins/NotifyIFTTT.py` to eliminate the service.