Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-23745node-tar Vulnerable to Arbitrary File Overwrite and Symlink Poisoning via Insufficient Path Sanitizationnpm · tar · fixed in 7.5.3
- CVE-2026-23744REC in MCPJam inspector due to HTTP Endpoint exposesnpm · @mcpjam/inspector · fixed in 1.4.3
- CVE-2026-23735Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') in graphql-modulesnpm · graphql-modules · fixed in 2.4.1, 3.1.1
- CVE-2026-23634Pepr Overly Permissive RBAC ClusterRole in Admin Modenpm · pepr · fixed in 1.0.5
- CVE-2025-15104Nu Html Checker (validator.nu) - Restriction bypass vulnerability allowing local SSRFnpm · vnu-jar
- CVE-2025-15265Svelte 5.46.0 - Hydratable Key Script-Breakout XSS (SSR)npm · svelte · fixed in 5.46.4
- CVE-2026-23527h3 v1 has Request Smuggling (TE.TE) issuenpm · h3 · fixed in 1.15.5
- CVE-2026-22775devalue vulnerable to denial of service due to memory/CPU exhaustion in devalue.parsenpm · devalue · fixed in 5.6.2
- CVE-2026-22774devalue vulnerable to denial of service due to memory exhaustion in devalue.parsenpm · devalue · fixed in 5.6.2
- CVE-2026-22803SvelteKit has a memory amplification DoS in Remote Functions binary form deserializernpm · @sveltejs/kit · fixed in 2.49.5
- CVE-2025-67647SvelteKit Denial of service and possible SSRF when using prerenderingnpm · @sveltejs/adapter-node, @sveltejs/kit · fixed in 5.5.1, 2.49.5
- CVE-2026-22036Undici has an unbounded decompression chain in HTTP responses on Node.js Fetch API via Content-Encoding leads to resource exhaustionnpm · undici · fixed in 7.18.2, 6.23.0
- CVE-2026-22819Outray has a Race Condition in main/apps/web/src/routes/api/$orgSlug/subdomains/index.tsnpm · outray · fixed in 0.1.5
- CVE-2026-22787html2pdf.js has a cross-site scripting vulnerabilitynpm · html2pdf.js · fixed in 0.14.0
- CVE-2026-22820Outray cli is vulnerable to race conditions in tunnels creationnpm · outray · fixed in 0.1.5
- CVE-2026-22686Sandbox Escape via Host Error Prototype Chain in enclave-vmnpm · enclave-vm · fixed in 2.7.0
- CVE-2025-15056Quill 2.0.3 - Lack of data validation in HTML export allowing XSSnpm · quill
- CVE-2026-22817JWT Algorithm Confusion via Unsafe Default (HS256) in Hono JWT Middleware Allows Token Forgery and Auth Bypassnpm · hono · fixed in 4.11.4
- CVE-2026-22818JWT algorithm confusion in Hono JWK Auth Middleware when JWK lacks "alg" (untrusted header.alg fallback)npm · hono · fixed in 4.11.4
- CVE-2026-22814Mass Assignment in AdonisJS Lucid Allows Overwriting Internal ORM Statenpm · @adonisjs/lucid · fixed in 21.8.2, 22.0.0-next.6
- CVE-2026-22809tarteaucitron.js has Regular Expression Denial of Service (ReDoS) vulnerabilitynpm · tarteaucitronjs · fixed in 1.29.0
- CVE-2025-68949n8n has a Webhook Node IP Whitelist Bypass via Partial String Matchingnpm · n8n · fixed in 2.2.0
- CVE-2026-22813Malicious website can execute commands on the local system through XSS in the OpenCode web UInpm · opencode-ai · fixed in 1.1.10
- CVE-2026-22812OpenCode's Unauthenticated HTTP Server Allows Arbitrary Command Executionnpm · opencode-ai · fixed in 1.0.216
- CVE-2026-22785orval MCP client is vulnerable to a code injection attack.npm · @orval/mcp · fixed in 7.18.0
- CVE-2026-0824questdb ui Web Console cross site scriptingnpm · @questdb/web-console · fixed in 1.1.10
- CVE-2026-22704HAXcms Has Stored XSS Vulnerability that May Lead to Account Takeovernpm · @haxtheweb/haxcms-nodejs · fixed in 25.0.0
- CVE-2026-22610Angular has XSS Vulnerability via Unsanitized SVG Script Attributesnpm · @angular/compiler, @angular/core · fixed in 21.1.0-rc.0, 21.0.7, 20.3.16 and more
- CVE-2026-22597Ghost has SSRF via External Media Inlinernpm · ghost · fixed in 6.11.0, 5.130.6
- CVE-2026-22596Ghost has SQL Injection in Members Activity Feednpm · ghost · fixed in 6.11.0, 5.130.6