Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-65592n8n before 1.123.64 Stored DOM XSS via cachedResultUrlnpm · n8n · fixed in 1.123.64, 2.30.1, 2.29.8
- CVE-2026-65591n8n before 1.123.64 Sanitizer Bypass Remote Code Executionnpm · n8n · fixed in 1.123.64, 2.30.1, 2.29.8
- CVE-2026-65590n8n before 2.30.1 Shell Sandbox Bypass on Linux Windowsnpm · n8n · fixed in 2.30.1, 2.29.8
- CVE-2026-65589n8n before 1.123.64 Credential Exposure via LLM Node Execution Datanpm · n8n · fixed in 1.123.64, 2.30.1, 2.29.8
- CVE-2026-65016n8n before 1.123.64, 2.29.8, and 2.30.1 Privilege Escalation via SSO Instance-Rolenpm · n8n · fixed in 1.123.64, 2.30.1, 2.29.8
- CVE-2026-65015n8n before 2.30.1 Privilege Escalation via run_node_toolnpm · n8n · fixed in 2.30.1, 2.29.8
- CVE-2026-65014n8n before 2.28.0 Authentication Bypass via test-webhooknpm · n8n · fixed in 2.27.4
- CVE-2026-45820fflate through 0.8.2 is vulnerable to denial of service via an infinite loop in unzipSync().npm · fflate · fixed in 0.4.9, 0.5.4, 0.6.11 and more
- CVE-2026-43947FUXA Vulnerable to Unauthenticated Remote Code Execution via Script Test Mode Authorization Bypassnpm · fuxa-server · fixed in 1.3.1
- CVE-2026-43946FUXA has an unauthenticated arbitrary tag value disclosure via /api/getTagValuenpm · fuxa-server · fixed in 1.3.1
- CVE-2026-43945FUXA Vulnerable to Pre-auth RCE via Path Manipulation & Configuration Injectionnpm · @frangoteam/fuxa · fixed in 1.3.1
- CVE-2026-44907A denial of service vulnerability could be triggered by sending specially crafted HTTP requests to server function endpoints, this could leanpm · react-server-dom-parcel, react-server-dom-turbopack +1 · fixed in 19.1.9, 19.2.8, 19.0.8
- CVE-2026-46681@nevware21/ts-utils: Prototype Pollution in objDeepCopy/objCopyProps via for...in without hasOwnPropertynpm · @nevware21/ts-utils · fixed in 0.14.0
- CVE-2026-57495AgenticMail: Unauthenticated inbound mail triggers bypassPermissions resume of the operator's Claude Code session (bridge-wake)npm · @agenticmail/claudecode, @agenticmail/codex +2 · fixed in 0.2.39, 0.1.33, 0.9.43 and more
- CVE-2026-57494AgenticMail: Cross-agent task authorization bypass in AgenticMail APInpm · @agenticmail/api · fixed in 0.9.64
- CVE-2026-47255AgenticMail API/storage and outbound relay hardeningnpm · @agenticmail/api, @agenticmail/core · fixed in 0.9.32, 0.9.10
- CVE-2026-47144Shamefile has an arbitrary file read via shamefile.yaml in shame nextnpm · shamefile · fixed in 0.1.7
- CVE-2026-58484Network-AI: Poisoned environment backup manifest allows arbitrary recursive deletion during backup pruningnpm · network-ai · fixed in 5.12.2
- CVE-2026-58482Network-AI: ApprovalInbox HTTP server has no authentication — anyone can approve pending agent actionsnpm · network-ai · fixed in 5.12.2
- CVE-2026-46701Network-AI: Unauthenticated Cross-Origin MCP Tool Invocation via Empty Default Secretnpm · network-ai · fixed in 5.4.5
- CVE-2026-58481Network-AI: AgentRuntime sandbox path-prefix checks allow file access outside the configured base directorynpm · network-ai · fixed in 5.12.2
- CVE-2026-58414Network-AI: EnvironmentManager.backup() follows symlinked directories and copies files outside the environment root into backupsnpm · network-ai · fixed in 5.12.2
- CVE-2026-58413EnvironmentManager.restore() backup ID path traversal copies arbitrary directories into environment datanpm · network-ai · fixed in 5.12.2
- CVE-2026-54051Network-AI has an an OS Command Injection issuenpm · network-ai · fixed in 5.9.1
- CVE-2026-46412Malicious code in @beproduct/nestjs-auth (0.1.2 through 0.1.19) — Mini Shai-Hulud wormnpm · @beproduct/nestjs-auth
- CVE-2026-16221fast-uri vulnerable to host confusion via literal backslash authority delimiternpm · fast-uri · fixed in 2.4.3, 3.1.4, 4.1.1
- CVE-2026-48049@hapi/inert: Static-file confinement bypass via sibling-prefix pathnpm · @hapi/inert · fixed in 7.1.1
- CVE-2026-48022@hapi/wreck: Sensitive credential headers leak across cross-port and cross-scheme redirectsnpm · @hapi/wreck · fixed in 18.1.2
- CVE-2026-44979@hapi/wreck : Sensitive `Proxy-Authorization` header leaked across cross-hostname redirectsnpm · @hapi/wreck · fixed in 18.1.1
- CVE-2026-54335Feathersjs: Prototype pollution in @feathersjs/commons _.merge via JSON-parsed __proto__npm · @feathersjs/commons · fixed in 5.0.45