Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-115934SQL injection leading to privilege escalationPackagist · craftcms/cms · fixed in 5.11.2, 4.18.9
- CVE-2026-125115Novu: `validateUrlSsrf` permits CGNAT (100.64.0.0/10) destinations — affects Workflow HTTP request step + Webhook filter conditionnpm · @novu/application-generic · fixed in 3.17.0
- CVE-2026-125113XRootD: Path traversal in directory listing allows access to the parent directory via trailing ".." patternPyPI · xrootd · fixed in 5.9.2
- CVE-2026-102289zizmor: Debug logging prints available GitHub credentials in cleartextPyPI · zizmor · fixed in 1.28.0
- CVE-2026-125106Wagtail: Improper restriction handling on Page translation API endpointPyPI · wagtail · fixed in 7.0.9, 7.3.4, 7.4.3 and more
- CVE-2026-123819Wagtail: Improper permission handling when copying snippetsPyPI · wagtail · fixed in 7.0.9, 7.3.4, 7.4.3 and more
- CVE-2026-123818LMDeploy URL parser disagreement permits SSRF filter bypassPyPI · lmdeploy · fixed in 0.15.0
- CVE-2026-123815pyLoad: Tar extraction creates device nodes and FIFOs (member types not filtered; tarfile extractall without filter=)PyPI · pyload-ng
- CVE-2026-123814pyLoad WindowsPhoneNotify addon: non-admin SETTINGS user triggers SSRF via unguarded http.client notification hostPyPI · pyload-ng
- CVE-2026-123813pyLoad: Privilege revocation and password change through the REST API do not invalidate the user's sessionPyPI · pyload-ng
- CVE-2026-123806python-tuf: Platform-dependent delegation path matchingPyPI · tuf · fixed in 7.0.0
- CVE-2026-119078Apache Commons Codec: Blake3 doFinalize is stateless; the documented KDF example derives identical keysMaven · commons-codec:commons-codec · fixed in 1.23.0
- CVE-2026-124077Apache Commons Codec: NUL bytes in tree entry names cause Git/SWHID identifier collisions (GitIdentifiers class)Maven · commons-codec:commons-codec · fixed in 1.23.0
- CVE-2026-87857Temporal Server workflow-history pagination token is not bound to the requested namespace and workflowGo · go.temporal.io/server · fixed in 1.30.7, 1.31.3
- SZB-5ab74d9eedEthersphere's bee-js and Swarm Desktop releases reported to carry wallet-stealing malwarenpm · @ethersphere/bee-js
- CVE-2026-119613AshAi sends unrecognized tool errors verbatim to MCP clients and the model, disclosing internal detailsHex · ash_ai · fixed in 1.5.1
- CVE-2026-120367Apache Axis2/Java: unbounded JSON request body bufferingMaven · org.apache.axis2:axis2-json · fixed in 2.0.2
- CVE-2026-123779Apache Axis2/Java: exposeServiceMetadata not enforced on all metadata routesMaven · org.apache.axis2:axis2-openapi, org.apache.axis2:axis2-transport-http · fixed in 2.0.2
- CVE-2026-123753Apache Axis2/Java: SSRF via WS-Addressing ReplyTo and FaultTo endpointsMaven · org.apache.axis2:axis2-kernel · fixed in 2.0.2
- CVE-2026-123766Apache Axis2/Java: Cross-site scripting in the OpenAPI module's Swagger UI pageMaven · org.apache.axis2:axis2-openapi · fixed in 2.0.2
- CVE-2026-123770Apache Axis2/Java: Unbounded multipart and form-encoded request bodiesMaven · org.apache.axis2:axis2-kernel · fixed in 2.0.2
- CVE-2026-120761Apache Axis2/Java: XML External Entity (XXE) injection via imported WSDL/XSD documentsMaven · org.apache.axis2:axis2-kernel · fixed in 2.0.2
- CVE-2026-120832Apache Axis2/Java: SSRF via WSDL/XSD schema import resolutionMaven · org.apache.axis2:axis2-kernel · fixed in 2.0.2
- CVE-2026-82436Apache Storm Client: Deserialization of Untrusted Data from the State StoreMaven · org.apache.storm:storm-client · fixed in 3.1.0
- CVE-2026-82440Apache Storm Nimbus: Submitter-Controlled Class Instantiation in Nimbus via a Fail-Open Scheduler Strategy AllowlistMaven · org.apache.storm:storm-client · fixed in 3.1.0
- CVE-2026-40913Apache Airflow: Import Errors API Leaks Unauthorized DAG Stack Traces via Incomplete Per-File RBAC EnforcementPyPI · apache-airflow-core · fixed in 3.4.0
- CVE-2026-50204Apache Airflow: Audit-log secrets masker redacts by key name only, persisting connection and Variable secrets in cleartextPyPI · apache-airflow, apache-airflow-core · fixed in 3.0.0, 3.4.0
- CVE-2026-68982Apache Airflow: CeleryExecutor: forged callback workloads run on Celery workers without workload-token validationPyPI · apache-airflow-core · fixed in 3.4.0
- CVE-2026-76185Apache Airflow Task SDK: Task SDK SecretCache: non-injective team cache key enables cross-team secret disclosure in multi-team modePyPI · apache-airflow-task-sdk · fixed in 1.4.0
- CVE-2026-86829Apache Airflow: Deserialization of task-controlled XCom values in the Scheduler during dependency evaluationPyPI · apache-airflow-core · fixed in 3.4.0