Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-54490websocket-driver: Resource limit bypass via message compressionnpm · websocket-driver · fixed in 0.7.5
- CVE-2026-54466websocket-driver: Message corruption via abuse of protocol length headersnpm · websocket-driver · fixed in 0.7.5
- CVE-2026-50272dd-trace: Improper parsing of W3C baggage headers may lead to DoSnpm · dd-trace · fixed in 5.100.0
- CVE-2026-49977tarteaucitron.js: data-cookie attribute can be used to delete arbitrary cookiesnpm · tarteaucitronjs · fixed in 1.33.0
- CVE-2026-44974Parameter smuggling in @hapi/content header parser allows upload-filter bypass via duplicate parametersnpm · @hapi/content · fixed in 6.0.2
- CVE-2026-48819Hey API: `buildClientParams` template: prototype chain substitution via unknown `$<slot>___proto__` keynpm · @hey-api/openapi-ts · fixed in 0.97.3
- CVE-2026-50289systeminformation: OS command injection in networkInterfaces() via interfaces(5) source-directive path on Linuxnpm · systeminformation · fixed in 5.31.7
- CVE-2026-58195Agentic-Flow: OS Command Injection in agentic-flow MCP server tools via unsanitized tool-parameter interpolation into execSyncnpm · agentic-flow · fixed in 2.0.14
- CVE-2026-52746JSONata: Malicious inputs to "$toMillis" function can cause resource exhaustionnpm · jsonata · fixed in 2.2.0, 1.8.9
- CVE-2026-62208OpenClaw < 2026.6.5 Authorization Header Forwarding via SSEnpm · openclaw · fixed in 2026.6.5
- CVE-2026-63397remorses/genql code injectionnpm · @genql/cli · fixed in 6.3.4
- CVE-2026-55629Whistle: Path traversalnpm · whistle · fixed in 2.10.3
- CVE-2026-46341Apify MCP server: Domain Allowlist Bypass in fetch-apify-docs via String Prefix Matchingnpm · @apify/actors-mcp-server · fixed in 0.9.21
- CVE-2026-45325Gestor de Oferta: Prototype pollution in @tmlmobilidade/utils setValueAtPathnpm · @tmlmobilidade/utils · fixed in 20260509.340.15
- CVE-2026-53598Prompty: Arbitrary File Read via ${file:path} Reference Expansionnpm · @prompty/core · fixed in 2.0.0-beta.2
- CVE-2026-53597Prompty: Arbitrary code execution via JavaScript frontmatter in TypeScript loadernpm · @prompty/core · fixed in 2.0.0-beta.3
- GHSA-62GX-5Q78-WRVXobsidian-local-rest-api: Authenticated path traversal via URL-encoded %2F in /vault/{path} — arbitrary host file read/write/deletenpm · obsidian-local-rest-api · fixed in 4.1.3
- CVE-2026-48795Incomplete fix for CVE-2026-25754 in @adonisjs/bodyparsernpm · @adonisjs/bodyparser · fixed in 10.1.5, 11.0.3
- CVE-2026-55445Qinglong: Incomplete fix for CVE-2026-3965: Improper Authenticationnpm · @whyour/qinglong · fixed in 2.20.1
- CVE-2026-566789Router: Kiro region injection allows authenticated SSRF with Authorization header forwardingnpm · 9router · fixed in 0.5.6
- CVE-2026-566799Router: Mass assignment in PATCH /api/settings allows authenticated authorization downgradenpm · 9router · fixed in 0.5.4
- CVE-2026-493539Router: Local-Only Access Gate Bypass in 9router via Host Header SpoofINGnpm · 9router
- CVE-2026-493529Router: Hardcoded Default fallback JWT Secret Allows Authentication Bypassnpm · 9router · fixed in 0.4.45
- CVE-2026-463399Router: Unauthenticated Remote Code Execution via unprotected MCP custom plugin routesnpm · 9router · fixed in 0.4.37
- CVE-2026-55608n8n-MCP: Incorrect authorization can expose default-scope workflow version backups in multi-tenant HTTP modenpm · n8n-mcp · fixed in 2.57.4
- CVE-2026-54052n8n-MCP: Cross-tenant access to workflow version backups in multi-tenant HTTP deploymentsnpm · n8n-mcp · fixed in 2.56.1
- CVE-2026-55410NocoBase backup restore schema name allows command injectionnpm · @nocobase/plugin-backups · fixed in 2.1.19
- CVE-2026-52887NocoBase: SQL injection in /api/myInAppChannels:list filter to PG-superuser RCEnpm · @nocobase/plugin-notification-in-app-message · fixed in 2.0.61
- CVE-2026-52888NocoBase: Sensitive Data Exposure via SQL Blacklist Bypassnpm · @nocobase/plugin-collection-sql · fixed in 2.0.62, 2.1.0-alpha.46, 2.1.0-beta.45
- CVE-2026-15895OS command injection in jsii-diff in AWS jsiinpm · jsii-diff · fixed in 1.131.0