Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-55156Token Optimizer MCP: Unauthenticated Path Traversal in Dashboard Session Log API Endpointsnpm · @ooples/token-optimizer-mcp · fixed in 5.1.0
- CVE-2026-55157Token Optimizer MCP: OS command injection in smart_user via username in get-user-infonpm · @ooples/token-optimizer-mcp · fixed in 5.1.0
- CVE-2026-101912ip-address: isInSubnet() and isHostInSubnet() compare addresses of different families as if they shared an address space, allowing an allowlist check to admit an address outside its rangenpm · ip-address · fixed in 10.7.1
- CVE-2026-101911ip-address: Address6 builds a parse diagnostic proportional to the input with no length bound, allowing a single long string to stall or crash the processnpm · ip-address · fixed in 10.7.1
- CVE-2026-101910ip-address: no classifier recognizes the NAT64 local-use range 64:ff9b:1::/48, allowing SSRF and trust-boundary bypassnpm · ip-address · fixed in 10.5.1
- CVE-2026-101909Axios: Prototype Pollution Gadget in axios toFormData Optionsnpm · axios · fixed in 0.34.0, 1.20.0
- CVE-2026-101908Axios: Prototype pollution gadget in fetch adapter can alter outbound requestsnpm · axios · fixed in 1.20.0
- CVE-2026-101907Axios: maxRedirects: 0 is not enforced by the fetch adapter, allowing redirect-based SSRFnpm · axios · fixed in 1.20.0
- CVE-2026-101906Axios: ReDoS (O(N²)) in shouldBypassProxy host normalization, reachable via untrusted redirect Locationnpm · axios · fixed in 1.20.0
- CVE-2026-101905Axios: Node HTTP adapter prototype-pollution gadget allows request socket hijack via inherited createConnectionnpm · axios · fixed in 1.20.0
- CVE-2026-101904Axios: Header Injection via Inherited headers After Minimal Interceptornpm · axios · fixed in 1.20.0
- CVE-2026-101903Axios: ReDoS in fromDataURI data: URL parser freezes the Node event loop (DoS)npm · axios · fixed in 1.20.0
- CVE-2026-101902Axios: Prototype-Pollution Gadget in the Default Instance Allows Inherited Object.prototype.method to Override HTTP Methodnpm · axios · fixed in 0.34.0, 1.20.0
- CVE-2026-101901Axios: Denial of Service via Unhandled 'error' Event in HTTP/2 ClientHttp2Session Initializationnpm · axios · fixed in 1.20.0
- CVE-2026-101900Axios: Fetch Adapter Header Injection via Inherited FormData getHeadersnpm · axios · fixed in 1.20.0
- CVE-2026-101898Axios: HTTP/2 adapter bypasses configured DNS lookup and proxy controlsnpm · axios · fixed in 1.20.0
- CVE-2026-101894@xhmikosr/decompress: Path traversal via symlink chainnpm · @xhmikosr/decompress, decompress · fixed in 11.1.4, 10.2.2
- CVE-2026-101043pnpm 11.0.0 before 11.11.0 Environment Variable Exfiltration via Proxy Settingsnpm · pnpm · fixed in 11.11.0, 10.34.5
- CVE-2026-100723vm2 before 3.12.2 Memory Disclosure via zlib Buffer Poolnpm · vm2 · fixed in 3.12.2
- CVE-2026-100722vm2 before 3.12.2 Host Process Termination via Construct Trapnpm · vm2 · fixed in 3.12.2
- CVE-2026-100721vm2 before 3.12.2 Authorization Bypass via Custom Resolvernpm · vm2 · fixed in 3.12.2
- CVE-2026-100702Nodemailer before 10.0.2 Stack Exhaustion via Nested Recipient Arraysnpm · nodemailer · fixed in 10.0.2
- CVE-2026-100701Nodemailer 5.0.0 through 10.0.1 TLS servername Cache Confusionnpm · nodemailer · fixed in 10.0.2
- CVE-2026-100700nodemailer before 10.0.6 Denial of Service via addressparsernpm · nodemailer · fixed in 10.0.6
- CVE-2026-100699Nodemailer before 10.0.9 Malformed Envelope Recipient via RFC 5322 Commentnpm · nodemailer · fixed in 10.0.9
- CVE-2026-100582OpenClaw Channel Plugins before 2026.8.1 Channel Read Allowlist Bypassnpm · @openclaw/feishu, @openclaw/googlechat +2 · fixed in 2026.8.1
- CVE-2026-57449Actual Sync Server: CORS Proxy GitHub API Allowlist Prefix Bypass Leaks Private Repositories Through the Server GitHub Tokennpm · @actual-app/sync-server · fixed in 26.7.0
- CVE-2026-93363Payload CMS storage-vercel-blob Adapter Improper Access Control on Upload Routenpm · @payloadcms/storage-vercel-blob · fixed in 3.90.0, 4.0.0-canary.34
- CVE-2026-61788@bytebase/dbhub's read-only mode does not prevent database writesnpm · @bytebase/dbhub · fixed in 0.22.6
- CVE-2026-61784xhtml-purifier has HTML attribute-injection (sanitizer bypass) that leads to XSSnpm · xhtml-purifier · fixed in 0.4.3