Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-70594Ghost: Session Fixation in Ghost Adminnpm · ghost · fixed in 6.54.1
- CVE-2026-70593Ghost: Theme Upload Path Traversalnpm · ghost · fixed in 6.54.1
- CVE-2026-70592Ghost: Database Backup Path Traversalnpm · ghost · fixed in 6.54.1
- CVE-2026-70591Ghost: Server-Side Request Forgery in Image Fetchingnpm · ghost · fixed in 6.54.1
- CVE-2026-70590Ghost: Blind Password Hash Disclosure in Ghost Admin APInpm · ghost · fixed in 6.54.1
- CVE-2026-70589Ghost: Archived Offers can be Redeemednpm · ghost · fixed in 6.54.1
- CVE-2026-70588Ghost: Cross-Site Scripting in Universal Importnpm · ghost · fixed in 6.54.1
- CVE-2026-70478Flowise: Unauthenticated OAuth2 token refresh endpoint returns access tokens — enables token theft for any connected servicenpm · flowise · fixed in 3.1.3
- CVE-2026-70477Flowise: CSV Agent Prompt Injection Remote Code Execution Vulnerabilitynpm · flowise, flowise-components · fixed in 3.1.3
- CVE-2026-70476Flowise: Broken Access Control in Stripe Subscription Endpoints Allows Cross-Tenant Billing Manipulationnpm · flowise · fixed in 3.1.3
- CVE-2026-70475Flowise: Missing Authorization on Execution Update Endpointnpm · flowise · fixed in 3.1.3
- CVE-2026-70474Flowise: Cross-Workspace OAuth2 Credential Metadata Leaknpm · flowise · fixed in 3.1.3
- CVE-2026-70473Flowise: Information Disclosure in GET /api/v1/upsert-history returns the entire server-wide upsert historynpm · flowise · fixed in 3.1.3
- CVE-2026-70472Flowise: Cross-workspace credential IDOR in openai-assistants-vector-storenpm · flowise · fixed in 3.1.3
- CVE-2026-70471Flowise: RBAC Bypass Leading to Unauthorized Workspace Variables Disclosurenpm · flowise · fixed in 3.1.3
- CVE-2026-70470Flowise: Pyodide validator Unicode homoglyph bypass leads to RCEnpm · flowise, flowise-components · fixed in 3.1.3
- CVE-2026-69264Flowise: RCE via CSVAgent csvFile data URI base64 segment is interpolated into Python source without validationnpm · flowise, flowise-components · fixed in 3.1.3
- CVE-2026-69263Flowise: CVE-2025-8943 Patch Bypass: npm_config_yes bypasses MCP environment variable blocklist (Unauthenticated RCE)npm · flowise, flowise-components · fixed in 3.1.3
- CVE-2026-69262Flowise: `DELETE /api/v1/chatflows/:id` does not validate resource type, allowing `agentflows:delete` and `chatflows:delete` to delete each other’s flow typenpm · flowise · fixed in 3.1.3
- CVE-2026-48121@langchain/langgraph-checkpoint-mongodb: NoSQL parameter injection in MongoDBSaver allows cross-tenant state accessnpm · @langchain/langgraph-checkpoint-mongodb · fixed in 1.3.1
- CVE-2026-69259Flowise RCE via SQLite Record Manager Nodenpm · flowise, flowise-components · fixed in 3.1.3
- CVE-2026-69258Flowise: Unauthenticated Property Injection into Flow Execution Context via Ungated `overrideConfig` Spread in Prediction APInpm · flowise · fixed in 3.1.3
- CVE-2026-69257Flowise: SSRF Protection Bypass via IPv4-Mapped IPv6 Addressesnpm · flowise · fixed in 3.1.3
- CVE-2026-69256Flowise: Remote Code Execution Vulnerability in CSVAgentnpm · flowise, flowise-components · fixed in 3.1.3
- CVE-2026-69255Flowise: CSV Agent Remote Code Execution via Pyodide Code Injection — Root Shell Verifiednpm · flowise, flowise-components · fixed in 3.1.3
- CVE-2026-10032Arbitrary JavaScript Execution via openUrl in @a2ui/web_corenpm · @a2ui/web_core · fixed in 0.10.2
- CVE-2026-69254Flowise: RCE via NodeVM Sandbox Escape in executeJavaScriptCode() nodeVMOptions Overridenpm · flowise, flowise-components · fixed in 3.1.3
- CVE-2026-69253Flowise Sandbox Escape to RCEnpm · flowise, flowise-components · fixed in 3.1.3
- CVE-2026-69252Flowise: Missing authorization on `/api/v1/files` allows low-privileged API keys to list and delete files across workspaces within the same organizationnpm · flowise · fixed in 3.1.3
- CVE-2026-69251Flowise RCE via TypeORM DataSourcenpm · flowise, flowise-components · fixed in 3.1.3