Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-46421Supply chain compromise via malicious package versions (@cap-js/sqlite, @cap-js/postgres, @cap-js/db-service)npm · @cap-js/db-service, @cap-js/postgres +1 · fixed in 2.11.0, 2.3.0
- CVE-2026-49987Repomix: Command Injection (RCE) via `--remote-branch` Argument Injectionnpm · repomix · fixed in 1.14.1
- CVE-2026-49988Repomix: attach_packed_output can bypass file-read secret scanning for supported local filesnpm · repomix · fixed in 1.14.1
- CVE-2026-53517Better Auth OAuth Provider: Refresh Token Rotation Race Condition Allows Concurrent Replay and Token Family Forkingnpm · @better-auth/oauth-provider, better-auth · fixed in 1.6.11, 1.6.0
- CVE-2026-45337Better Auth: Device authorization approve and deny accept any authenticated session while the user code is pendingnpm · better-auth · fixed in 1.6.11
- CVE-2026-53514Better Auth: Unauthorized invitation acceptance via unverified email match in organization pluginnpm · better-auth · fixed in 1.6.11
- CVE-2026-53515Better Auth: Privilege escalation via SSO provider registration: missing admin role check in @better-auth/ssonpm · @better-auth/sso · fixed in 1.6.11
- CVE-2026-53512Better Auth: OAuth refresh-token replay via missing client authentication on oidc-provider and mcp pluginsnpm · better-auth · fixed in 1.6.11
- CVE-2026-53518Better Auth OAuth Provider: Race Condition in Authorization Code Exchange Enables Multi-Use Code Redemptionnpm · @better-auth/oauth-provider, better-auth · fixed in 1.6.11
- CVE-2026-53513Better Auth: Server-side request forgery via unvalidated OIDC endpoints on @better-auth/sso provider registrationnpm · @better-auth/sso · fixed in 1.6.11
- CVE-2026-53516Better Auth: Account takeover via OAuth auto-link to unverified pre-registered emailnpm · better-auth · fixed in 1.6.11
- CVE-2026-45805Penpot: MCP REPL server binds to 0.0.0.0 with unauthenticated /execute endpoint — RCEnpm · @penpot/mcp · fixed in 2.15.0
- CVE-2026-61836Directus: Authorization-dependent response served from unsegmented cache keynpm · directus · fixed in 12.0.0
- CVE-2026-61835Directus: SSRF Protection Bypass via 0.0.0.0 in File Importnpm · directus · fixed in 12.0.0
- CVE-2026-59259n8n - Permission Bypass via Expression Parser Mismatch in External Secretsnpm · n8n · fixed in 1.123.61, 2.28.1, 2.27.4
- CVE-2026-59254n8n - External Secrets Disclosure via Workflow Node Expressionsnpm · n8n · fixed in 2.28.1, 2.27.4
- CVE-2026-56764Hono - Timing Attack in basicAuth and bearerAuth Middlewarenpm · hono · fixed in 4.11.10
- CVE-2026-56353n8n - Authentication Bypass in Chat Trigger Nodenpm · n8n · fixed in 1.123.22, 2.9.3, 2.10.1
- CVE-2026-56352n8n - Arbitrary File Read and Execution via ExecuteWorkflow localFile Parameternpm · n8n · fixed in 2.19.3
- CVE-2026-56349n8n - Guardrail Node Bypass via Crafted Inputnpm · n8n · fixed in 2.10.0
- CVE-2026-48125UAParser.js: Unbounded `Sec-CH-UA-Model` parsing can trigger ReDoS in `withClientHints()`npm · ua-parser-js · fixed in 2.0.10
- CVE-2026-48816sigstore-js: Insufficient Verification of Data Authenticitynpm · @sigstore/verify · fixed in 3.1.1
- CVE-2026-48758sigstore-js: DSSE payloadType type-binding failurenpm · @sigstore/core · fixed in 3.2.1
- CVE-2026-48815sigstore-js: `certificateOIDs` verification constraints are silently dropped and never enforcednpm · sigstore · fixed in 4.1.1
- CVE-2026-53486decompress: Archive extraction can create files and links outside the target directorynpm · @xhmikosr/decompress, decompress · fixed in 10.2.1, 11.1.3
- CVE-2026-48801linkify-it: Quadratic algorithmic complexity in LinkifyIt#match scan loopnpm · linkify-it · fixed in 5.0.1
- CVE-2026-49978DOMPurify IN_PLACE Sanitization Bypass via Attached Shadow Root Inside <template>.contentnpm · dompurify · fixed in 3.4.7
- CVE-2026-49459DOMPurify: IN_PLACE mode preserves attributes of a clobbered root element, allowing XSS via attacker-controlled root DOMnpm · dompurify · fixed in 3.4.6
- CVE-2026-49458DOMPurify: Cross-realm IN_PLACE sanitization leaves executable markup intact via realm-bound `instanceof` checksnpm · dompurify · fixed in 3.4.6
- CVE-2026-47423DOMPurify XSS via `selectedcontent` re-clonenpm · dompurify · fixed in 3.4.5