Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-85014undici vulnerable to Denial of Service via WebSocketStream unclean closenpm · undici · fixed in 7.29.1, 8.10.2
- CVE-2026-85024undici vulnerable to Denial of Service via unhandled error in WebSocket permessage-deflate decompressionnpm · undici · fixed in 6.28.1, 7.29.1, 8.10.2
- CVE-2026-85730smol-toml: Denial of Service via malformed TOML documentsnpm · smol-toml · fixed in 1.7.1
- CVE-2026-85651Trigger.dev before 4.5.2 Unauthorized Environment Access via Run Replaynpm · trigger.dev · fixed in 4.5.2
- CVE-2026-85650Trigger.dev before 4.5.2 Server-Side Request Forgery via webhook alert-channelnpm · trigger.dev · fixed in 4.5.2
- CVE-2026-84428fastify vulnerable to header validation bypass via incomplete schema case normalizationnpm · fastify · fixed in 5.12.2
- CVE-2026-84469fastify vulnerable to request validation bypass via skipped boolean false schemasnpm · fastify · fixed in 5.12.2
- CVE-2026-76169fastify vulnerable to authentication bypass via malformed URLs reaching encapsulated not-found handlersnpm · fastify · fixed in 5.12.2
- CVE-2026-84504fastify vulnerable to request body replacement via an async validation result collisionnpm · fastify · fixed in 5.12.2
- CVE-2026-77465toml-node: Uncontrolled Recursionnpm · toml · fixed in 4.2.0
- CVE-2026-63376toml-node: Prototype Pollution Leads to `Object.prototype` Corruption via `__proto__` Key-Path Desynchronizationnpm · toml · fixed in 4.1.2
- CVE-2026-85063node-csv: Prototype replacement still reachable via columns pathnpm · csv-parse · fixed in 7.0.2
- CVE-2026-85062Colord: Slow rejection of oversized malformed color stringsnpm · colord · fixed in 2.9.4
- CVE-2026-85061MapLibre GL JS: XSS Sanitizer Bypass in DOM.sanitize() via Live NamedNodeMap Removal Skipnpm · maplibre-gl · fixed in 6.4.1
- CVE-2026-71429stream-json: pick/ignore/filter/replace filters are O(depth²) on nested input — small crafted JSON blocks the event loop for seconds→minutes (DoS)npm · stream-json · fixed in 3.5.0
- CVE-2026-53728Medplum - Improper Validation of Redirect URI in External Auth Callback allows Authorization Code Leakagenpm · @medplum/core · fixed in 5.1.6
- CVE-2026-85393node-forge through 1.4.0 RSA PKCS#1 v1.5 Signature Forgery via Nested DigestAlgorithm Paddingnpm · node-forge · fixed in 1.4.0
- CVE-2026-49456Waku: Open Redirect via `unstable_redirect` Helpernpm · waku · fixed in 1.0.0-beta.1
- CVE-2026-49455Waku: Cross-Origin CSRF on RSC Server Action Dispatchnpm · waku · fixed in 1.0.0-beta.1
- CVE-2026-84394fast-uri vulnerable to host confusion via an unclosed bracket in the URI authoritynpm · fast-uri · fixed in 2.4.6, 3.1.7, 4.1.4
- CVE-2026-84292fast-uri vulnerable to authority injection via an unvalidated port in serializenpm · fast-uri · fixed in 2.4.6, 3.1.7, 4.1.4
- CVE-2026-82404TOON: Prototype pollution when decoding untrusted TOON inputnpm · @toon-format/toon · fixed in 2.3.1
- CVE-2026-84376Astro: Authorization bypass from missing path-segment boundary check when stripping the configured basenpm · astro · fixed in 7.2.4
- CVE-2026-84375js-yaml: maxTotalMergeKeys does not limit CPU use for empty merge sourcesnpm · js-yaml · fixed in 4.3.2, 3.15.2
- CVE-2026-84373Vitest: Path Traversal / Arbitrary File Read via @vitest/mocker Redirect Mocknpm · @vitest/mocker, vitest · fixed in 4.1.11, 5.0.0-rc.2
- CVE-2026-75604Next.js: Unauthenticated Remote Code Execution on windows-hosted serversnpm · next · fixed in 15.5.24, 16.3.3
- CVE-2026-84371ApostropheCMS: Stored XSS via SVG SMIL URI-list scheme-policy bypassnpm · sanitize-html · fixed in 2.17.7
- CVE-2026-84370SVGO: removeScripts allows executable links through namespace and control-character bypassesnpm · svgo · fixed in 2.8.4, 3.3.5, 4.1.0
- CVE-2026-84369SVGO: removeScripts incompletely sanitizes executable HTML in SVG foreignObject elementsnpm · svgo · fixed in 2.8.4, 3.3.5, 4.1.0
- CVE-2026-84368joi: Prototype pollution via a `proto` language key in custom messagesnpm · @hapi/joi, joi · fixed in 17.13.6, 18.2.5