Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-22696dcap-qvl has Missing Verification for QE Identitynpm · @phala/dcap-qvl, @phala/dcap-qvl-node +1 · fixed in 0.3.9
- CVE-2026-23864Multiple denial of service vulnerabilities exist in React Server Components, affecting the following packages: react-server-dom-parcel, reacnpm · react-server-dom-parcel, react-server-dom-turbopack +1 · fixed in 19.0.4, 19.1.5, 19.2.4
- CVE-2026-0755gemini-mcp-tool execAsync Command Injection Remote Code Execution Vulnerabilitynpm · gemini-mcp-tool · fixed in 1.1.6
- CVE-2025-15061Framelink Figma MCP Server fetchWithRetry Command Injection Remote Code Execution Vulnerabilitynpm · figma-developer-mcp · fixed in 0.6.3
- CVE-2026-24132Orval Mock Generation Code Injection via constnpm · @orval/mock · fixed in 7.20.0, 8.0.3
- CVE-2025-65098Typebot Vulnerable to Credential Theft via Client-Side Script Execution and API Authorization Bypassnpm · @typebot.io/js · fixed in 0.9.15
- CVE-2026-24006Seroval affected by Denial of Service via Deeply Nested Objectsnpm · seroval · fixed in 1.4.1
- CVE-2026-24001jsdiff has a Denial of Service vulnerability in parsePatch and applyPatchnpm · diff · fixed in 8.0.3, 5.2.2, 4.0.4 and more
- CVE-2026-23966sm-crypto Affected by Private Key Recovery in SM2-PKEnpm · sm-crypto · fixed in 0.3.14
- CVE-2026-23965sm-crypto Affected by Signature Forgery in SM2-DSAnpm · sm-crypto · fixed in 0.4.0
- CVE-2026-23967sm-crypto Affected by Signature Malleability in SM2-DSAnpm · sm-crypto · fixed in 0.3.14
- CVE-2026-23957seroval is vulnerable to Denial of Service via array serializationnpm · seroval · fixed in 1.4.1
- CVE-2026-23956seroval affected by Denial of Service via RegExp serializationnpm · seroval · fixed in 1.4.1
- CVE-2026-23737seroval Affected by Remote Code Execution via JSON Deserializationnpm · seroval · fixed in 1.4.1
- CVE-2026-23736seroval Affected by Prototype Pollution via JSON Deserializationnpm · seroval · fixed in 1.4.1
- CVE-2026-24048Backstage has a Possible SSRF when reading from allowed URL's in `backend.reading.allow`npm · @backstage/backend-defaults · fixed in 0.12.2, 0.13.2, 0.14.1
- CVE-2026-24047@backstage/cli-common has a possible `resolveSafeChildPath` Symlink Chain Bypassnpm · @backstage/cli-common · fixed in 0.1.17
- CVE-2026-24046Backstage has a Possible Symlink Path Traversal in Scaffolder Actionsnpm · @backstage/backend-defaults, @backstage/plugin-scaffolder-backend +1 · fixed in 0.12.2, 0.13.2, 0.14.1 and more
- CVE-2026-21852Claude Code Leaks Data via Malicious Environment Configuration Before Trust Confirmationnpm · @anthropic-ai/claude-code · fixed in 2.0.65
- CVE-2025-13465Prototype Pollution Vulnerability in Lodash _.unset and _.omit functionsnpm · lodash, lodash-amd +2 · fixed in 4.17.23
- CVE-2026-0933OS Command Injection in `wrangler pages deploy`npm · wrangler · fixed in 3.114.17, 4.59.1
- CVE-2026-1245CVE-2026-1245npm · binary-parser · fixed in 2.3.0
- CVE-2026-23950node-tar has Race Condition in Path Reservations via Unicode Ligature Collisions on macOS APFSnpm · tar · fixed in 7.5.4
- CVE-2026-23947Orval MCP client is vulnerable to code injection via unsanitized x-enum-descriptions in enum generationnpm · @orval/core · fixed in 8.0.2, 7.19.0
- CVE-2025-66803Race condition in the turbo-frame element handler in Hotwired Turbo before 8.0.x causes logout operations to fail when delayed frame responsnpm · @hotwired/turbo · fixed in 8.0.21
- CVE-2026-23522Lobe Chat has IDOR in Knowledge Base File Removal that Allows Cross User File Deletionnpm · @lobehub/chat
- CVE-2026-22037@fastify/express vulnerable to Improper Handling of URL Encoding (Hex Encoding)npm · @fastify/express · fixed in 4.0.3
- CVE-2026-22031Fastify Middie Middleware Path Bypassnpm · @fastify/middie · fixed in 9.1.0
- CVE-2026-23733Lobe Chat has Cross-Site Scripting (XSS) issue that may escalate to Remote Code Execution (RCE)npm · @lobehub/chat
- CVE-2025-15536BYVoid OpenCC MaxMatchSegmentation.cpp MaxMatchSegmentation heap-based overflownpm · opencc · fixed in 1.2.0