Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-55604@arikusi/deepseek-mcp-server has an Authorization Bypass Through User-Controlled Keynpm · @arikusi/deepseek-mcp-server · fixed in 1.7.0
- CVE-2026-55605@arikusi/deepseek-mcp-server Missing Authentication on Self-Hosted HTTP MCP Endpointnpm · @arikusi/deepseek-mcp-server · fixed in 1.8.0
- CVE-2026-59149Mockoon: Path traversal in templated `filePath` lets a request escape the served directory (prefix-only base check)npm · @mockoon/cli, @mockoon/commons-server · fixed in 9.7.0
- CVE-2026-59148Mockoon: Unauthenticated admin API + wildcard CORS allows mock-state hijack and secret theftnpm · @mockoon/cli, @mockoon/commons-server · fixed in 9.7.0
- CVE-2026-59817Ghost: Paid gift memberships obtainable at minimal cost via the donations featurenpm · ghost · fixed in 6.44.0
- CVE-2026-59209n8n: Shared Credential Header Leak via HTTP Request Pagination Expressionnpm · n8n · fixed in 1.123.61, 2.28.1, 2.27.4
- CVE-2026-59206n8n: Prototype Pollution via Workflow Credentials Leads to Unauthenticated User and Project Enumerationnpm · n8n · fixed in 1.123.61, 2.28.1, 2.27.4
- CVE-2026-59208n8n: Cross-Issuer Token Exchange Account Binding via Subject-Only Identity Resolutionnpm · n8n · fixed in 2.28.1, 2.27.4
- CVE-2026-59207n8n: "Allowed HTTP Request Domains" Restriction Bypass via AI Agents MCP Connectornpm · n8n · fixed in 2.28.1, 2.27.4
- CVE-2026-12590body-parser vulnerable to denial of service when invalid limit value silently disables size enforcementnpm · body-parser · fixed in 1.20.6, 2.3.0
- CVE-2026-39243decompress before 4.2.2 allows arbitrary hardlink creation during archive extraction, enabling file read disclosure and file corruption.npm · decompress
- CVE-2026-59723Cline: Cross-Origin WebSocket Hijacking in Cline Hub Dashboard (`/browser` endpoint)npm · cline · fixed in 3.0.30
- CVE-2026-55849@cyclonedx/cyclonedx-npm: Shell Injection via Unsanitized `--workspace` Argumentnpm · @cyclonedx/cyclonedx-npm · fixed in 5.0.0
- CVE-2026-54527JupyterLab Git: Stored XSS leading to RCEnpm · @jupyterlab/git · fixed in 0.54.0
- CVE-2026-58191Appium: Reflected XSS / arbitrary JS in @appium/base-driver /test/guinea-pig* routesnpm · @appium/base-driver · fixed in 10.7.0
- CVE-2026-57481Parse Server: LiveQuery discloses object data to a subscriber across an ACL read-access changenpm · parse-server · fixed in 9.9.1-alpha.13, 8.6.83
- CVE-2026-57480Parse Server: Denial of service via exponential-time processing of deeply nested query operatorsnpm · parse-server · fixed in 9.9.1-alpha.12, 8.6.82
- CVE-2026-55778Parse Server: Stored XSS via non-standard file extension bypassing file upload extension blocklistnpm · parse-server · fixed in 9.9.1-alpha.11, 8.6.81
- CVE-2026-49866libp2p: CPU DoS via oversized IHAVE and IWANT control message arraysnpm · @libp2p/gossipsub · fixed in 16.0.0
- CVE-2026-55596Plate: Media embed provider metadata can bypass URL sanitization and execute iframe JavaScriptnpm · @platejs/media · fixed in 53.1.4
- CVE-2026-56669Elysia: Inefficient Algorithmic Complexity and Interpretation Conflictnpm · elysia · fixed in 1.4.29
- CVE-2026-55575LiquidJS: `pop` filter bypasses `memoryLimit` accounting that its array-filter siblings enforcenpm · liquidjs · fixed in 10.27.1
- CVE-2026-59731Astro 6.4.7 Authorization Bypass via Decode Iteration Limit and Rewrite Path Canonicalization Mismatchnpm · astro · fixed in 6.4.8
- CVE-2026-59895Hono: Server-Side XSS via JSX Escaping Bypass in cx() Utilitynpm · hono · fixed in 4.12.27
- CVE-2026-59896hono/jsx does not isolate context per request, leading to cross-request data disclosurenpm · hono · fixed in 4.12.27
- CVE-2026-59897Hono: API Gateway v1 adapter can drop a distinct repeated request header value during de-duplicationnpm · hono · fixed in 4.12.27
- CVE-2026-59892OpenTelemetry JavaScript: Denial of service in `JaegerPropagator` via unhandled exception on a malformed headernpm · @opentelemetry/propagator-jaeger · fixed in 2.9.0
- CVE-2026-59887linkify-it: Quadratic-complexity DoS via the `mailto:` validator scan-loop on attacker textnpm · linkify-it · fixed in 5.0.2
- CVE-2026-59879Immutable.js `List` 32-bit trie overflow → unrecoverable DoSnpm · immutable · fixed in 4.3.9, 5.1.8, 3.8.4
- CVE-2026-59880Immutable.js: Hash-collision algorithmic complexity denial of service in Immutable.Map/Setnpm · immutable · fixed in 4.3.9, 5.1.8, 3.8.4