Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-86081n8n: Regular Expression Denial of Service in the Default Blocked-File-Pattern Match via a Git Node Clone Pathnpm · n8n · fixed in 1.123.76, 2.38.2, 2.37.7
- CVE-2026-86082n8n: Domain-Restriction Bypass via Unguarded Model-Search Endpoint in OpenAI Chat Model Nodenpm · n8n · fixed in 1.123.76, 2.38.2, 2.37.7
- CVE-2026-86083n8n: Expression Sandbox Escape via Shared Builtin Tampering and Code-Printer Injection Leads to Code Executionnpm · n8n · fixed in 1.123.76, 2.38.2, 2.37.7
- CVE-2026-86084n8n: Disabled OIDC SSO Endpoints Remain Active and Issue Valid Sessionsnpm · n8n · fixed in 1.123.76, 2.38.2, 2.37.7
- CVE-2026-86085n8n: Cross-Tenant Project-Member PII Disclosure via Missing Per-Project Scope Check on Role Assignment Endpointsnpm · n8n · fixed in 2.38.2, 2.37.7
- CVE-2026-86993n8n: Log Streaming Event Destinations Decrypt Generic-Auth Credentials Without Ownership Checknpm · n8n · fixed in 1.123.76, 2.38.2, 2.37.7
- CVE-2026-86994n8n: Cross-User Active Workflow ID and Lifecycle Event Disclosure via Missing userId Filternpm · n8n · fixed in 1.123.76, 2.38.2, 2.37.7
- CVE-2026-86995n8n: Git Node branch.<name>.remote Config Key Bypasses Sandbox Path Restriction, Enabling Local Git Repository Readnpm · n8n · fixed in 1.123.76, 2.38.2, 2.37.7
- CVE-2026-86996n8n: Agent Workflow Tool Bypasses Sub-Workflow Caller Policynpm · n8n · fixed in 2.38.2, 2.37.7
- CVE-2026-86074n8n: Instance AI Credential Setup Accepts Unvalidated Probe URL from Fetched Contentnpm · n8n · fixed in 2.38.2, 2.37.7
- CVE-2026-86073n8n: Per-Resource OAuth Consent Bypass via Unbound Refresh Token Resource Substitutionnpm · n8n · fixed in 2.38.1, 2.37.7
- CVE-2026-82533DeepSeek Harness < 0.1.2-alpha.1 Authentication Bypass via Host Header Spoofingnpm · @deepseek-ai/dsh-client-connection · fixed in 0.1.2-alpha.1
- CVE-2026-86597Sensitive information written to logs by Snowflake driversnpm · snowflake-sdk · fixed in 3.3.0
- CVE-2026-76969Credential disclosure in multitenant applications using SAP Cloud Application Programming Model (CAP)npm · @sap/cds-mtxs · fixed in 4.0.3, 3.9.7, 2.7.7 and more
- CVE-2026-86540knowns before 0.30.0 Arbitrary Code Execution via LSP Binarynpm · knowns · fixed in 0.30.0
- CVE-2026-86439knowns before 0.30.0 Path Traversal via MCP doc and memory toolsnpm · knowns · fixed in 0.30.0
- CVE-2026-86253h3 before 1.15.6 Path Traversal via Percent-Encoded Dot Segmentsnpm · h3 · fixed in 2.0.1-rc.15, 1.15.6
- CVE-2026-86252h3 before 1.15.9 SSE Event Injection via Carriage Returnnpm · h3 · fixed in 2.0.1-rc.17, 1.15.9
- CVE-2026-86251h3 before 1.15.9 Path Traversal via Double Decodingnpm · h3 · fixed in 1.15.9
- CVE-2026-86250h3 before 2.0.1-rc.18 Denial of Service via Unbounded Chunked Cookienpm · h3 · fixed in 2.0.1-rc.18
- CVE-2026-86205h3 before 2.0.1-rc.18 Open Redirect via redirectBack()npm · h3 · fixed in 2.0.1-rc.18
- CVE-2026-18149undici vulnerable to Denial of Service via orphaned RetryHandler response bodynpm · undici · fixed in 7.29.1, 8.10.2
- CVE-2026-18540undici vulnerable to downstream response splitting via retry interceptornpm · undici · fixed in 6.28.1, 7.29.1, 8.10.2
- CVE-2026-19534undici vulnerable to Denial of Service via unrequested WebSocket subprotocolnpm · undici · fixed in 6.28.1, 7.29.1, 8.10.2
- CVE-2026-84890undici vulnerable to Denial of Service via unbounded decompression of compressed responsesnpm · undici · fixed in 7.29.1, 8.10.2
- CVE-2026-84933undici vulnerable to cross-user cookie disclosure via Set-Cookie caching in shared cachesnpm · undici · fixed in 7.29.1, 8.10.2
- CVE-2026-84947undici vulnerable to response truncation via oversized chunked responses in the dump interceptornpm · undici · fixed in 7.29.1, 8.10.2
- CVE-2026-84961undici vulnerable to TLS certificate validation bypass via dropped connect options in BalancedPoolnpm · undici · fixed in 7.29.1, 8.10.2
- CVE-2026-85008undici vulnerable to caching and replay of unsafe HTTP method responsesnpm · undici · fixed in 7.29.1, 8.10.2
- CVE-2026-85152undici vulnerable to cross-origin cache poisoning via missing origin isolation in interceptorsnpm · undici · fixed in 8.10.2