Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-92948vm2 3.9.6 through 3.11.5 Sandbox Escape via node:testnpm · vm2 · fixed in 3.11.7
- CVE-2026-92947vm2 before 3.11.7 Memory Disclosure via Buffer Poolnpm · vm2 · fixed in 3.11.7
- CVE-2026-92946vm2 before 3.11.7 Remote Code Execution via require.externalnpm · vm2 · fixed in 3.11.7
- CVE-2026-92945vm2 before 3.11.7 Module Allowlist Bypass via Prefix Matchingnpm · vm2 · fixed in 3.11.7
- CVE-2026-92944vm2 3.10.2 through 3.11.6 Sandbox Escape via Promise Protectornpm · vm2 · fixed in 3.11.7
- CVE-2026-92942vm2 before 3.11.7 Timeout Bypass via FinalizationRegistrynpm · vm2 · fixed in 3.11.7
- CVE-2026-92941vm2 3.11.3 before 3.11.7 TLS Trust Store Manipulationnpm · vm2 · fixed in 3.11.7
- CVE-2026-92940vm2 3.11.3 through 3.11.6 HTTPS Credential Exposure via globalAgentnpm · vm2 · fixed in 3.11.7
- CVE-2026-92939vm2 3.11.3 through 3.11.6 Native Code Execution via crypto.setEnginenpm · vm2 · fixed in 3.11.7
- CVE-2026-92938vm2 3.11.3 through 3.11.6 Remote Code Execution via node:sqlitenpm · vm2 · fixed in 3.11.7
- CVE-2026-92937vm2 3.11.6 Remote Code Execution via Promise call/applynpm · vm2 · fixed in 3.11.7
- CVE-2026-92936vm2 3.11.0 before 3.11.7 Information Disclosure via Error Stacknpm · vm2 · fixed in 3.11.7
- CVE-2026-92935vm2 NodeVM Remote Code Execution via Array-Shaped Requirenpm · vm2 · fixed in 3.11.7
- CVE-2026-92934vm2 before 3.11.8 Sandbox Escape RCE via AggregateErrornpm · vm2 · fixed in 3.11.8
- CVE-2026-92933vm2 before 3.11.8 Information Disclosure via util.getCallSitesnpm · vm2 · fixed in 3.11.8
- CVE-2026-92599Joi before 17.13.7 and 18.2.6 ReDoS via isoDatenpm · joi · fixed in 17.13.7, 18.2.6
- CVE-2026-92598Nodemailer before 9.1.0 IDN/Punycode Domain Allow-list Bypassnpm · nodemailer · fixed in 9.1.0
- CVE-2026-92597Nodemailer before 9.1.0 Email Domain Validation Bypass via RFC 5322 Commentnpm · nodemailer · fixed in 9.1.0
- CVE-2026-92596Nodemailer before 9.1.0 Denial of Service via addressparsernpm · nodemailer · fixed in 9.1.0
- CVE-2026-92595Nodemailer before 9.1.1 Security Sandbox Bypass via resolveContentnpm · nodemailer · fixed in 9.1.1
- CVE-2026-63506Tina: [Broken Access Control] letting any TinaCloud user authorize against any self-hosted sitenpm · @tinacms/auth, next-tinacms-azure · fixed in 1.1.4, 15.0.1
- CVE-2026-63225Redocly CLI: Path traversal when using `split` commandnpm · @redocly/cli · fixed in 1.34.17, 2.33.2
- CVE-2026-77360oRPC: Vary Header Injection in CORS Plugin leading to potential Cache/CORS Bypassnpm · @orpc/server · fixed in 1.14.8
- CVE-2026-81176Svelte devalue: DoS via malformed inputnpm · devalue · fixed in 5.9.2
- CVE-2026-68904node-opcua: TCP Socket Leak (FIN-WAIT-2) via keepalive reconnection cycle - Resource Exhaustionnpm · node-opcua, node-opcua-client +1 · fixed in 2.170.0
- CVE-2026-63671@nuxtjs/mdc: the URL sanitizer misses SVG xlink:href and data:text/html, allowing XSS from untrusted markdown at the default configurationnpm · @nuxtjs/mdc · fixed in 0.22.1
- CVE-2026-88976@platejs/core HTML deserialization can trigger browser behavior during parsingnpm · @platejs/core · fixed in 53.3.11
- CVE-2026-92081fastify vulnerable to Denial of Service via unhandled exception on HTTP/2 trailer responsesnpm · fastify · fixed in 5.12.5
- CVE-2026-61560@zereight/mcp-gitlab's unauthenticated arbitrary file read via `upload_markdown` enables PAT exfiltration and full account takeovernpm · @zereight/mcp-gitlab · fixed in 2.1.27
- CVE-2026-61559@zereight/mcp-gitlab Vulnerable to Server-Side Request Forgerynpm · @zereight/mcp-gitlab · fixed in 2.1.27