Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-25051n8n Improper CSP Enforcement in Webhook Responses May Allow Stored XSSnpm · n8n · fixed in 1.123.2, 1.122.5
- CVE-2025-61917n8n Unsafe Buffer Allocation Allows In-Process Memory Disclosure in Task Runnernpm · n8n · fixed in 1.114.3
- CVE-2026-25049n8n Has an Expression Escape Vulnerability Leading to RCEnpm · n8n · fixed in 1.123.17, 2.5.2
- CVE-2026-25223Fastify's Content-Type header tab character allows body validation bypassnpm · fastify · fixed in 5.7.2
- CVE-2026-25224Fastify Vulnerable to DoS via Unbounded Memory Allocation in sendWebStreamnpm · fastify · fixed in 5.7.3
- CVE-2026-25150Prototype Pollution via FormData Processing in Qwik Citynpm · @builder.io/qwik-city · fixed in 1.19.0
- CVE-2026-25148Qwik SSR XSS via Unsafe Virtual Node Serializationnpm · @builder.io/qwik-city · fixed in 1.19.0
- CVE-2026-25151Qwik City has a CSRF Protection Bypass via Content-Type Header Validationnpm · @builder.io/qwik-city · fixed in 1.19.0
- CVE-2026-25155[qwik-city] CSRF protection middleware does not work properly for content type header with parameters (eg. multipart/form-data)npm · @builder.io/qwik-city · fixed in 1.12.0
- CVE-2026-25149Qwik City Open Redirect via fixTrailingSlashnpm · @builder.io/qwik-city · fixed in 1.19.0
- CVE-2026-24887Claude Code has a Command Injection in find Command Bypasses User Approval Promptnpm · @anthropic-ai/claude-code · fixed in 2.0.72
- CVE-2026-24053Cluade Code has a Path Restriction Bypass via ZSH Clobber which Allows Arbitrary File Writesnpm · @anthropic-ai/claude-code · fixed in 2.0.74
- CVE-2026-24052Claude Code has a Domain Validation Bypass which Allows Automatic Requests to Attacker-Controlled Domainsnpm · @anthropic-ai/claude-code · fixed in 1.0.111
- CVE-2026-1664Insecure Direct Object Reference (IDOR) via Header-Based Email Routingnpm · agents · fixed in 0.3.7
- CVE-2025-69970FUXA v1.2.7 contains an insecure default configuration vulnerability in server/settings.default.js.npm · fuxa-server
- CVE-2025-69971FUXA v1.2.7 contains a hard-coded credential vulnerability in server/api/jwt-helper.js.npm · @frangoteam/fuxa · fixed in 1.3.0
- CVE-2025-69981FUXA v1.2.7 contains an Unrestricted File Upload vulnerability in the `/api/upload` API endpoint.npm · fuxa-server
- CVE-2025-69983FUXA v1.2.7 allows Remote Code Execution (RCE) via the project import functionality.npm · fuxa-server
- CVE-2026-25228SignalK Server has Path Traversal leading to information disclosurenpm · signalk-server · fixed in 2.20.3
- CVE-2026-25142SandboxJS Prototype Pollution -> Sandbox Escape -> RCEnpm · @nyariv/sandboxjs · fixed in 0.8.27
- CVE-2026-24763Authenticated Command Injection in OpenClaw Docker Execution via PATH Environment Variablenpm · clawdbot · fixed in 2026.1.29
- CVE-2026-23515RCE - Command Injection in Signal K set-system-time pluginnpm · @signalk/set-system-time · fixed in 1.5.0
- CVE-2026-24040jsPDF has a Shared State Race Condition in addJS Pluginnpm · jspdf · fixed in 4.1.0
- CVE-2026-24043jsPDF Affected by Stored XMP Metadata Injection (Spoofing & Integrity Violation)npm · jspdf · fixed in 4.1.0
- CVE-2026-24133jsPDF Affected by Denial of Service (DoS) via Unvalidated BMP Dimensions in BMPDecodernpm · jspdf · fixed in 4.1.0
- CVE-2026-24737jsPDF has a PDF Injection in AcroFormChoiceField which allows Arbitrary JavaScript Executionnpm · jspdf · fixed in 4.1.0
- CVE-2026-25253OpenClaw (aka clawdbot or Moltbot) before 2026.1.29 obtains a gatewayUrl value from a query string and automatically makes a WebSocket connenpm · clawdbot · fixed in 2026.1.29
- CVE-2026-25152@backstage/plugin-techdocs-node vulnerable to possible Path Traversal in TechDocs Local Generatornpm · @backstage/plugin-techdocs-node · fixed in 1.14.1, 1.13.11
- CVE-2026-25153@backstage/plugin-techdocs-node vulnerable to arbitrary code execution via MkDocs hooksnpm · @backstage/plugin-techdocs-node · fixed in 1.14.1, 1.13.11
- CVE-2026-25141Orval has a code injection via unsanitized x-enum-descriptions uing JS commentsnpm · @orval/core · fixed in 7.21.0, 8.2.0