Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-118244Highcharts Core: AST `DOMParser` fallback assigns unsanitized markup to `innerHTML` during printnpm · highcharts · fixed in 12.6.1, 13.1.0
- CVE-2026-118243Highcharts Dashboards: `proto` data table id writes sync listeners to `Object.prototype`npm · @highcharts/dashboards · fixed in 4.2.2
- CVE-2026-118242Highcharts Grid: custom icon definition objects written with raw `setAttribute` on `<path>`npm · @highcharts/grid-lite, @highcharts/grid-pro · fixed in 3.2.0
- CVE-2026-116797Highcharts Grid Pro: cell-renderer `attributes` map written with raw `setAttribute`npm · @highcharts/dashboards, @highcharts/grid-pro · fixed in 4.0.0, 3.2.0
- CVE-2026-116796Highcharts Core: `javascript:` URL in an `xlink:href` attribute survives text filtering and reaches exported chartsnpm · highcharts · fixed in 11.4.9, 12.6.2, 13.1.1
- CVE-2026-116795RE2JS: Quadratic-time denial of service in re2js lookbehind matchingnpm · re2js · fixed in 2.8.7
- CVE-2026-59179OpenHop: Path Traversal in Flow ID File Operationsnpm · @openhop/server · fixed in 0.3.6
- CVE-2026-59176Functype: MCP set_functype_version Package Alias RCE via Unsanitized pnpm install + Dynamic Importnpm · functype-mcp-server · fixed in 1.4.4
- CVE-2026-55369Waline login accepts a non-string email as a match-all MongoDB querynpm · @waline/vercel · fixed in 1.41.0
- CVE-2026-59158Nuxt Ollama: public runtime configuration discloses the configured cloud API keynpm · nuxt-ollama · fixed in 1.3.1
- CVE-2026-116693dd-trace: ReDOS in URL query string obfuscationnpm · dd-trace · fixed in 5.131.1, 6.20.1
- CVE-2026-116689follow-redirects: Cross-realm sensitiveHeaders arrays are discarded and custom credentials can follow redirectsnpm · follow-redirects · fixed in 1.16.2
- CVE-2026-116688CKEditor: Cross-site scripting (XSS) in the engine packagenpm · @ckeditor/ckeditor5-engine, ckeditor5 · fixed in 47.7.4, 48.5.1
- CVE-2026-116687CKEditor: Cross-site scripting (XSS) in the engine packagenpm · @ckeditor/ckeditor5-engine, ckeditor5 · fixed in 47.7.4, 48.5.1
- GHSA-F897-62HF-6GXQMCP TypeScript SDK: HTTP server transports and handlers did not limit request body size or JSON-RPC batch lengthnpm · @modelcontextprotocol/hono, @modelcontextprotocol/node +2 · fixed in 2.0.1, 2.1.0, 1.30.1
- CVE-2026-116675TinyMCE Cross-Site Scripting (XSS) vulnerability using media plugin `data-mce-object` serializationnpm · tinymce · fixed in 8.9.3, 7.9.4
- CVE-2026-116674systeminformation: Prototype pollution in `networkStats()` via the interface namenpm · systeminformation · fixed in 5.33.13
- CVE-2026-116673systeminformation: Path traversal in Linux networkStats() allows symlink-based file disclosure outside /sys/class/netnpm · systeminformation · fixed in 5.33.14
- CVE-2026-116804DOMPurify from 3.4.4 before 3.4.17 SAFE_FOR_TEMPLATES Bypass via Shadow Root Contentnpm · dompurify · fixed in 3.4.17
- CVE-2026-116803DOMPurify before 3.4.17 DOM XSS via IN_PLACE Hook-Detached Subtreesnpm · dompurify · fixed in 3.4.17
- CVE-2026-116802DOMPurify before 3.4.17 XSS via SMIL attributeName Guard Bypass in XHTML Modenpm · dompurify · fixed in 3.4.17
- CVE-2026-116584Seroval `fromJSON`/`fromCrossJSON` denial of service via unvalidated array node lengthnpm · seroval · fixed in 1.6.8
- CVE-2026-116583Seroval: Code injection through a typed array's own constructor propertynpm · seroval · fixed in 1.6.11
- CVE-2026-116582Seroval: Script injection through RegExp sources in serialized outputnpm · seroval · fixed in 1.6.10, 1.0.0
- CVE-2026-116581Seroval: fromJSON deserializer trusts sequence doneAt (unauthenticated event-loop DoS)npm · seroval · fixed in 1.6.8
- CVE-2026-116580Seroval: Deserialization invokes attacker-chosen callables: AsyncIteratorFactoryInstance calls source.on(listener) without type checknpm · seroval · fixed in 1.6.8
- CVE-2026-116576systeminformation: Windows command injection in services() through Unicode quotation marksnpm · systeminformation · fixed in 5.33.16
- CVE-2026-116575Mem0: Cross-tenant conversation leak via unescaped delimiter collision in session-scope key (_build_session_scope)npm · mem0ai · fixed in 3.1.6
- CVE-2026-115923Backstage catalog rules can be bypassed for URL locations using encoded path segmentsnpm · @backstage/plugin-catalog-backend · fixed in 3.9.2, 4.0.2
- GHSA-H4FR-CMH5-QR62Fallow: A `.*` glob segment let an analyzed repository make Fallow test paths in the parent of the project rootnpm · @fallow-cli/fallow-node, fallow · fixed in 3.34.0