Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-35581Emissary has a Command Injection via PLACE_NAME Configuration in ExecutrixMaven · gov.nsa.emissary:emissary · fixed in 8.39.0
- CVE-2026-35580Emissary has GitHub Actions Shell Injection via Workflow InputsMaven · gov.nsa.emissary:emissary · fixed in 8.39.0
- CVE-2026-35571Emissary has Stored XSS via Navigation Template Link InjectionMaven · gov.nsa.emissary:emissary · fixed in 8.39.0
- CVE-2026-35554Apache Kafka Clients: Kafka Producer Message Corruption and Misrouting via Buffer Pool Race ConditionMaven · org.apache.kafka:kafka-clients · fixed in 3.9.2, 4.0.2, 4.1.2
- CVE-2026-33227Apache ActiveMQ Client, Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ Web, Apache ActiveMQ: Improper Limitation of a Pathname to a Restricted Classpath DirectoryMaven · org.apache.activemq:activemq-all, org.apache.activemq:activemq-broker +2 · fixed in 5.19.3, 6.2.2
- CVE-2026-34197Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Authenticated users could perform RCE via Jolokia MBeansMaven · org.apache.activemq:activemq-all, org.apache.activemq:activemq-broker · fixed in 5.19.5, 6.2.3
- CVE-2026-37977Keycloak: org.keycloak.protocol.oidc.grants.ciba: keycloak: information disclosure via cors header injection due to unvalidated jwt azp claimMaven · org.keycloak:keycloak-services · fixed in 26.4.13, 26.6.3
- CVE-2026-4636Keycloak: keycloak: uma policy bypass allows authenticated users to gain unauthorized access to victim-owned resources.Maven · org.keycloak:keycloak-services · fixed in 26.5.7
- CVE-2026-4634Keycloak: keycloak: denial of service via excessive processing of openid connect scope parametersMaven · org.keycloak:keycloak-services · fixed in 26.5.7
- CVE-2026-4325Keycloak: keycloak: replay of action tokens via improper handling of single-use entriesMaven · org.keycloak:keycloak-services · fixed in 26.5.7
- CVE-2026-4282Keycloak: keycloak: privilege escalation via forged authorization codes due to singleuseobjectprovider isolation flawMaven · org.keycloak:keycloak-services · fixed in 26.5.7
- CVE-2026-3872Keycloak: keycloak: information disclosure due to redirect_uri validation bypassMaven · org.keycloak:keycloak-services · fixed in 26.5.7
- CVE-2026-34361HAPI FHIR: Unauthenticated SSRF via /loadIG Chains with startsWith() Credential Leak for Authentication Token TheftMaven · ca.uhn.hapi.fhir:org.hl7.fhir.validation · fixed in 6.9.4
- CVE-2026-34360HAPI FHIR: Unauthenticated Blind SSRF via /loadIG Endpoint Enables Internal Network ProbingMaven · ca.uhn.hapi.fhir:org.hl7.fhir.core · fixed in 6.9.4
- CVE-2026-34359HAPI FHIR: Authentication Credential Leakage via Improper URL Prefix Matching on HTTP Redirect in HAPI FHIR CoreMaven · ca.uhn.hapi.fhir:org.hl7.fhir.core, ca.uhn.hapi.fhir:org.hl7.fhir.utilities · fixed in 6.9.4
- CVE-2026-34237MCP Java SDK has a Hardcoded Wildcard CORS (Access-Control-Allow-Origin: *)Maven · io.modelcontextprotocol.sdk:mcp-core · fixed in 1.0.1, 1.1.1, 0.18.3
- CVE-2026-34214Trino: Iceberg REST catalog static and vended credentials are accessible via query JSONMaven · io.trino:trino-iceberg · fixed in 480
- CVE-2026-33871Netty HTTP/2 CONTINUATION Frame Flood DoS via Zero-Byte Frame BypassMaven · io.netty:netty-codec-http2 · fixed in 4.1.132.Final, 4.2.11.Final
- CVE-2026-33870Netty: HTTP Request Smuggling via Chunked Extension Quoted-String ParsingMaven · io.netty:netty-codec-http · fixed in 4.1.132.Final, 4.2.10.Final
- CVE-2026-28369Undertow: undertow: request smuggling via malformed http request headersMaven · io.undertow:undertow-core, io.undertow:undertow-parent · fixed in 2.2.40.Final, 2.3.25.Final
- CVE-2026-28367Undertow: undertow: request smuggling via `\r\r\r` as a header block terminatorMaven · io.undertow:undertow-core, io.undertow:undertow-parent · fixed in 2.3.25.Final, 2.2.40.Final
- CVE-2026-28368Undertow: undertow: request smuggling via inconsistent header parsingMaven · io.undertow:undertow-core, io.undertow:undertow-parent · fixed in 2.2.40.Final, 2.3.25.Final
- CVE-2026-22744In RedisFilterExpressionConverter of spring-ai-redis-store, when a user-controlled string is passed as a filter value for a TAG field, strinMaven · org.springframework.ai:spring-ai-redis-store · fixed in 1.0.5, 1.1.4
- CVE-2026-22743Server-Side Request Forgery via Filter Expression Keys in Neo4jVectorStoreMaven · org.springframework.ai:spring-ai-neo4j-store · fixed in 1.0.5, 1.1.4
- CVE-2026-22742Server-Side Request Forgery in BedrockProxyChatModel via Unvalidated Media URL FetchingMaven · org.springframework.ai:spring-ai-bedrock-converse · fixed in 1.0.5, 1.1.4
- CVE-2026-22738SpEL Injection via Unescaped Filter Key in SimpleVectorStore Leads to Remote Code ExecutionMaven · org.springframework.ai:spring-ai-vector-store · fixed in 1.0.5, 1.1.4
- CVE-2026-33728dd-trace-java: Unsafe deserialization in RMI instrumentation may lead to remote code executionMaven · com.datadoghq:dd-java-agent · fixed in 1.60.3
- CVE-2026-33701OpenTelemetry: Unsafe Deserialization in RMI Instrumentation may Lead to Remote Code ExecutionMaven · io.opentelemetry.javaagent:opentelemetry-javaagent · fixed in 2.26.1
- CVE-2026-3121Keycloak: org.keycloak/keycloak-services: keycloak: privilege escalation via manage-clients permissionMaven · org.keycloak:keycloak-services · fixed in 26.5.6
- CVE-2026-3190Keycloak: keycloak: information disclosure via improper role enforcement in uma 2.0 protection apiMaven · org.keycloak:keycloak-model-jpa, org.keycloak:keycloak-server-spi-private +1 · fixed in 26.5.6