# cve.now: packages

Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. Filter with ?ecosystem=npm (or pypi, go, maven, crates.io, nuget, rubygems, packagist, hex), ?fix=none for advisories with no patch listed yet, or ?kind=malicious for malicious package releases; page with ?page=. Each line links the advisory's Markdown page.

- [CVE-2026-115934](https://cve.now/CVE-2026-115934.md): SQL injection leading to privilege escalation (CVSS 9.3, Packagist · craftcms/cms · fixed in 5.11.2, 4.18.9)
- [CVE-2026-125115](https://cve.now/CVE-2026-125115.md): Novu: \`validateUrlSsrf\` permits CGNAT (100.64.0.0/10) destinations — affects Workflow HTTP request step + Webhook filter condition (CVSS 6.8, npm · @novu/application-generic · fixed in 3.17.0)
- [CVE-2026-125113](https://cve.now/CVE-2026-125113.md): XRootD: Path traversal in directory listing allows access to the parent directory via trailing ".." pattern (CVSS 5.3, PyPI · xrootd · fixed in 5.9.2)
- [CVE-2026-102289](https://cve.now/CVE-2026-102289.md): zizmor: Debug logging prints available GitHub credentials in cleartext (CVSS 7.0, PyPI · zizmor · fixed in 1.28.0)
- [CVE-2026-125106](https://cve.now/CVE-2026-125106.md): Wagtail: Improper restriction handling on Page translation API endpoint (CVSS 6.5, PyPI · wagtail · fixed in 7.0.9, 7.3.4, 7.4.3 and more)
- [CVE-2026-123819](https://cve.now/CVE-2026-123819.md): Wagtail: Improper permission handling when copying snippets (CVSS 6.5, PyPI · wagtail · fixed in 7.0.9, 7.3.4, 7.4.3 and more)
- [CVE-2026-123818](https://cve.now/CVE-2026-123818.md): LMDeploy URL parser disagreement permits SSRF filter bypass (CVSS 7.5, PyPI · lmdeploy · fixed in 0.15.0)
- [CVE-2026-123815](https://cve.now/CVE-2026-123815.md): pyLoad: Tar extraction creates device nodes and FIFOs (member types not filtered; tarfile extractall without filter=) (CVSS 9.4, PyPI · pyload-ng, No patch listed yet)
- [CVE-2026-123814](https://cve.now/CVE-2026-123814.md): pyLoad WindowsPhoneNotify addon: non-admin SETTINGS user triggers SSRF via unguarded http.client notification host (CVSS 6.4, PyPI · pyload-ng, No patch listed yet)
- [CVE-2026-123813](https://cve.now/CVE-2026-123813.md): pyLoad: Privilege revocation and password change through the REST API do not invalidate the user's session (CVSS 7.5, PyPI · pyload-ng, No patch listed yet)
- [CVE-2026-123806](https://cve.now/CVE-2026-123806.md): python-tuf: Platform-dependent delegation path matching (CVSS 4.0, PyPI · tuf · fixed in 7.0.0)
- [CVE-2026-119078](https://cve.now/CVE-2026-119078.md): Apache Commons Codec: Blake3 doFinalize is stateless; the documented KDF example derives identical keys (unrated (no CVSS), Maven · commons-codec:commons-codec · fixed in 1.23.0)
- [CVE-2026-124077](https://cve.now/CVE-2026-124077.md): Apache Commons Codec: NUL bytes in tree entry names cause Git/SWHID identifier collisions (GitIdentifiers class) (low (no CVSS), Maven · commons-codec:commons-codec · fixed in 1.23.0)
- [CVE-2026-87857](https://cve.now/CVE-2026-87857.md): Temporal Server workflow-history pagination token is not bound to the requested namespace and workflow (CVSS 5.3, Go · go.temporal.io/server · fixed in 1.30.7, 1.31.3)
- [SZB-5ab74d9eed](https://cve.now/SZB-5ab74d9eed.md): Ethersphere's bee-js and Swarm Desktop releases reported to carry wallet-stealing malware (npm · @ethersphere/bee-js, Malicious package, Reported, not confirmed)
- [CVE-2026-119613](https://cve.now/CVE-2026-119613.md): AshAi sends unrecognized tool errors verbatim to MCP clients and the model, disclosing internal details (CVSS 5.3, Hex · ash\_ai · fixed in 1.5.1)
- [CVE-2026-120367](https://cve.now/CVE-2026-120367.md): Apache Axis2/Java: unbounded JSON request body buffering (CVSS 7.5, Maven · org.apache.axis2:axis2-json · fixed in 2.0.2)
- [CVE-2026-123779](https://cve.now/CVE-2026-123779.md): Apache Axis2/Java: exposeServiceMetadata not enforced on all metadata routes (low (no CVSS), Maven · org.apache.axis2:axis2-openapi, org.apache.axis2:axis2-transport-http · fixed in 2.0.2)
- [CVE-2026-123753](https://cve.now/CVE-2026-123753.md): Apache Axis2/Java: SSRF via WS-Addressing ReplyTo and FaultTo endpoints (unrated (no CVSS), Maven · org.apache.axis2:axis2-kernel · fixed in 2.0.2)
- [CVE-2026-123766](https://cve.now/CVE-2026-123766.md): Apache Axis2/Java: Cross-site scripting in the OpenAPI module's Swagger UI page (unrated (no CVSS), Maven · org.apache.axis2:axis2-openapi · fixed in 2.0.2)
- [CVE-2026-123770](https://cve.now/CVE-2026-123770.md): Apache Axis2/Java: Unbounded multipart and form-encoded request bodies (low (no CVSS), Maven · org.apache.axis2:axis2-kernel · fixed in 2.0.2)
- [CVE-2026-120761](https://cve.now/CVE-2026-120761.md): Apache Axis2/Java: XML External Entity (XXE) injection via imported WSDL/XSD documents (unrated (no CVSS), Maven · org.apache.axis2:axis2-kernel · fixed in 2.0.2)
- [CVE-2026-120832](https://cve.now/CVE-2026-120832.md): Apache Axis2/Java: SSRF via WSDL/XSD schema import resolution (unrated (no CVSS), Maven · org.apache.axis2:axis2-kernel · fixed in 2.0.2)
- [CVE-2026-82436](https://cve.now/CVE-2026-82436.md): Apache Storm Client: Deserialization of Untrusted Data from the State Store (unrated (no CVSS), Maven · org.apache.storm:storm-client · fixed in 3.1.0)
- [CVE-2026-82440](https://cve.now/CVE-2026-82440.md): Apache Storm Nimbus: Submitter-Controlled Class Instantiation in Nimbus via a Fail-Open Scheduler Strategy Allowlist (unrated (no CVSS), Maven · org.apache.storm:storm-client · fixed in 3.1.0)
- [CVE-2026-40913](https://cve.now/CVE-2026-40913.md): Apache Airflow: Import Errors API Leaks Unauthorized DAG Stack Traces via Incomplete Per-File RBAC Enforcement (low (no CVSS), PyPI · apache-airflow-core · fixed in 3.4.0)
- [CVE-2026-50204](https://cve.now/CVE-2026-50204.md): Apache Airflow: Audit-log secrets masker redacts by key name only, persisting connection and Variable secrets in cleartext (unrated (no CVSS), PyPI · apache-airflow, apache-airflow-core · fixed in 3.0.0, 3.4.0)
- [CVE-2026-68982](https://cve.now/CVE-2026-68982.md): Apache Airflow: CeleryExecutor: forged callback workloads run on Celery workers without workload-token validation (unrated (no CVSS), PyPI · apache-airflow-core · fixed in 3.4.0)
- [CVE-2026-76185](https://cve.now/CVE-2026-76185.md): Apache Airflow Task SDK: Task SDK SecretCache: non-injective team cache key enables cross-team secret disclosure in multi-team mode (unrated (no CVSS), PyPI · apache-airflow-task-sdk · fixed in 1.4.0)
- [CVE-2026-86829](https://cve.now/CVE-2026-86829.md): Apache Airflow: Deserialization of task-controlled XCom values in the Scheduler during dependency evaluation (unrated (no CVSS), PyPI · apache-airflow-core · fixed in 3.4.0)

[Next page](https://cve.now/packages.md?page=2)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/packages
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.