Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-77339Process Compose: Browser DNS rebinding lets websites control local process-compose MCP toolsGo · github.com/f1bonacc1/process-compose · fixed in 1.120.0
- CVE-2026-58197ToolHive: containerized MCP servers can reach host services via host.docker.internal, enabling lateral movementGo · github.com/stacklok/toolhive · fixed in 0.30.1
- CVE-2026-61795Capsule: hostnameRegexHandler.OnUpdate validates stale (old) Tenant regex, allowing invalid AllowedHostnames regex to bypass webhook validationGo · github.com/projectcapsule/capsule · fixed in 0.13.7
- CVE-2026-61672Capsule: Tenant owner bypasses Capsule's forbidden namespace/service/node label and annotation enforcementGo · github.com/projectcapsule/capsule · fixed in 0.13.7
- CVE-2026-61794Capsule: Malformed ForbiddenAnnotations.Regex can bypass Tenant validation and trigger namespace admission panicGo · github.com/projectcapsule/capsule · fixed in 0.13.7
- CVE-2026-81505Convoy: Cross-Tenant Source IDOR Leaks Plaintext Message Broker CredentialsGo · github.com/frain-dev/convoy · fixed in 0.9.3-0.20260724092134-1cc67cd16fb1
- CVE-2026-61682kcp front-proxy does not strip inbound X-Remote-* identity headers, allowing any authenticated client to inject groups/warrants and impersonate system:masters in any workspaceGo · github.com/kcp-dev/kcp · fixed in 0.31.4, 0.32.2
- CVE-2026-50158yutu: Arbitrary File Write via MCP `caption-download` ToolGo · github.com/eat-pray-ai/yutu · fixed in 0.10.9-dev1
- CVE-2026-77281Caddy: rewrite placeholder re-expansionGo · github.com/caddyserver/caddy/v2 · fixed in 2.11.4
- CVE-2026-50125MKP: Unbounded Pod Log Read via Attacker-Controlled `limitBytes`/`tailLines` Causes Memory ExhaustionGo · github.com/stackloklabs/mkp · fixed in 0.4.1
- CVE-2026-50285Pomerium: Pre-Auth Memory Exhaustion via Unbounded zstd Decompression in HPKE CallbackGo · github.com/pomerium/pomerium · fixed in 0.32.8
- CVE-2026-54495Cross-namespace FeatureFlagSource and InProcessConfiguration resolution exposes spec contents on multi-tenant clustersGo · github.com/open-feature/open-feature-operator
- CVE-2026-45720Omni: TOCTOU race condition allows multiple concurrent uses of a single-use SAML session tokenGo · github.com/siderolabs/omni · fixed in 1.6.6, 1.7.3
- CVE-2026-45723Omni: Operator can traverse image-factory API paths via unsanitized `talos_version` in CreateSchematicGo · github.com/siderolabs/omni · fixed in 1.6.6, 1.7.3
- CVE-2026-45726Omni: Reader-level users can retrieve imported cluster CA keys via ResourceServiceGo · github.com/siderolabs/omni · fixed in 1.6.6, 1.7.3
- CVE-2026-55061uniget: EDITOR Command Injection in uniget CLIGo · gitlab.com/uniget-org/cli · fixed in 0.27.6
- CVE-2026-55062uniget: Path Traversal in Hook Files - Directory Escape VulnerabilityGo · gitlab.com/uniget-org/cli · fixed in 0.27.6
- CVE-2026-47252Anyquery: AppleScript/JXA Code Injection via Unescaped URL in macOS plugins (Brave, Chrome, Edge, Reminders, Safari)Go · github.com/julien040/anyquery/plugins/brave, github.com/julien040/anyquery/plugins/chrome +2 · fixed in 0.0.0-20240826075852-c651df0b8767
- CVE-2026-81871OpenTelemetry-Go: Log gRPC exporter ignores env TLS certs, bypassing mTLS/pinningGo · go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc · fixed in 0.21.0
- CVE-2026-81872OpenTelemetry-Go: BatchProcessor can busy-spin when export buffer is fullGo · go.opentelemetry.io/otel/sdk/log · fixed in 0.21.0
- CVE-2026-81869OpenTelemetry-Go: UTF-8 replacement rune bypasses attribute length truncationGo · go.opentelemetry.io/otel/sdk · fixed in 1.33.0
- CVE-2026-81870OpenTelemetry-Go: Exporter config logging may leak endpoint URLs in info logsGo · go.opentelemetry.io/otel/exporters/otlp/otlptrace, go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc +3 · fixed in 1.45.0
- CVE-2026-86043Skipper: OPA body-authz bypass: truncated_body mitigation fails open on chunked/HTTP-2 (incomplete fix CVE-2026-50197)Go · github.com/zalando/skipper · fixed in 0.27.37
- CVE-2026-86003CoreDNS DoH/DoQ/gRPC bypass UPDATE rejection enforced on UDP/TCPGo · github.com/coredns/coredns · fixed in 1.14.7
- CVE-2026-82399CoreDNS: Unauthenticated memory exhaustion in custom transportsGo · github.com/coredns/coredns · fixed in 1.14.7
- CVE-2026-85731oras-go: Arbitrary file write outside file.Store root via symlink-chain bypass in tar extraction (pushDir)Go · oras.land/oras-go/v2 · fixed in 2.6.2
- CVE-2026-85732oras-go: Blind SSRF via unvalidated Link header URL in pagination allows internal network probingGo · oras.land/oras-go/v2 · fixed in 2.6.2
- CVE-2026-82410Pocketbase: Unhandled panic in worker goroutinesGo · github.com/pocketbase/pocketbase · fixed in 0.22.48, 0.39.7
- CVE-2026-77411RabbitMQ amqp091-go: Protocol Desynchronization and Frame Injection via Integer Overflow in readLongstrGo · github.com/rabbitmq/amqp091-go · fixed in 1.13.0
- CVE-2026-77412RabbitMQ amqp091-go: Denial of Service via Malicious Field Length in AMQP ClientGo · github.com/rabbitmq/amqp091-go · fixed in 1.13.0