Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-54267Angular Client Hydration DOM Clobbering & Response-Cache Poisoningnpm · @angular/core · fixed in 22.0.1, 21.2.17, 20.3.25
- CVE-2026-54266Angular: Weak 32-Bit Cache Key Hashing in `HttpTransferCache` Leading to Cross-Request Data Leakage and State Poisoningnpm · @angular/common · fixed in 22.0.1, 21.2.17, 20.3.25
- CVE-2026-54265Angular: Two-Way Property Binding Sanitization Bypass (XSS)npm · @angular/compiler · fixed in 22.0.1, 21.2.17, 20.3.25
- CVE-2026-52725Angular Template and Dynamic Component Namespace Bypass leading to Cross-Site Scripting (XSS)npm · @angular/core · fixed in 21.2.15, 22.0.0-rc.2, 19.2.23 and more
- CVE-2026-50557Angular: Template and Attribute Namespace Sanitization Bypass (XSS)npm · @angular/compiler, @angular/core · fixed in 21.2.15, 22.0.0-rc.2, 20.3.22 and more
- CVE-2026-53550js-yaml: Quadratic-complexity DoS in merge key handling via repeated aliasesnpm · js-yaml · fixed in 4.2.0, 3.15.0
- CVE-2026-53655node-tar applies PAX size override to intermediary GNU long-name/long-link headers, causing tar parser interpretation differential (file smuggling)npm · tar · fixed in 7.5.16
- CVE-2026-56236Capgo CLI - Arbitrary File Overwrite via Symlink-Following in Local Credential Operationsnpm · @capgo/cli · fixed in 7.84.6
- CVE-2026-56294capacitor-native-biometric - Authentication Bypass via Unvalidated CryptoObject in onAuthenticationSucceedednpm · @capgo/capacitor-native-biometric · fixed in 8.3.6
- CVE-2026-56276Flowise - Mass Assignment in PUT /api/v1/user Allows Password Hash Overridenpm · flowise · fixed in 3.1.2
- CVE-2026-56267Flowise - PII Disclosure via Unauthenticated Forgot Password Endpointnpm · flowise · fixed in 3.0.13
- CVE-2025-71331Flowise - Cross-Site Scripting in Chat Messages and Agent Workflowsnpm · flowise · fixed in 3.0.8
- CVE-2026-56317Nuxt - Cross-Site Scripting via NoScript Component Slot Contentnpm · nuxt · fixed in 4.4.7, 3.21.7
- CVE-2024-58351Flowise - Remote Code Execution via overrideConfig Parameternpm · flowise · fixed in 2.1.4
- CVE-2026-49336@microsoft/kiota-http-fetchlibrary: Bearer token and Cookie leak across origin on redirect due to case-mismatched scrub in fetchRequestAdapternpm · @microsoft/kiota-http-fetchlibrary · fixed in 1.0.0-preview.102
- CVE-2026-49293CPU exhaustion via O(n^2) BigInt construction on radix-prefixed integer literalsnpm · js-toml · fixed in 1.1.2
- CVE-2026-49357Streamable HTTP mode exposes LINE Desktop read/send tools without MCP authenticationnpm · line-desktop-mcp · fixed in 1.1.2
- CVE-2026-12644Versions of the package ts-deepmerge before 8.0.0 are vulnerable to Uncaught Exception due to the improper handling of built-in Object.protonpm · ts-deepmerge · fixed in 8.0.0
- CVE-2026-49252deepstream is vulnerable to prototype pollutionnpm · @deepstream/server · fixed in 10.0.5
- CVE-2026-44691In Eclipse Theia versions prior to 1.69.0, custom task definitions in workspace files (e.g.npm · @theia/debug, @theia/task +1 · fixed in 1.69.0
- CVE-2026-22551In Eclipse Theia versions prior to 1.71.0, the AI chat rendered Markdown image tags from AI responses, triggering HTTP requests to arbitrarynpm · @theia/ai-chat, @theia/ai-chat-ui +5 · fixed in 1.71.0
- CVE-2026-46580In Eclipse Theia versions prior to 1.71.0, files matching the pattern .prompts/*.prompttemplate in a workspace were automatically loaded andnpm · @theia/ai-chat, @theia/ai-chat-ui +4 · fixed in 1.71.0
- CVE-2026-44688In Eclipse Theia versions prior to 1.71.0, the AI chat agent processed workspace file and directory names as part of its prompt context withnpm · @theia/ai-chat, @theia/ai-chat-ui +5 · fixed in 1.71.0
- CVE-2026-45357LiquidJS: Memory and render limit bypass via unbounded width padding in `date` filter (strftime)npm · liquidjs · fixed in 10.26.0
- CVE-2026-44646LiquidJS: `{% render %}` tag silently bypasses per-render `ownPropertyOnly:true` via `Context.spawn()`npm · liquidjs · fixed in 10.26.0
- CVE-2026-45617LiquidJS: ReDoS via Quadratic Backtracking in `strip_html` Filter Regexnpm · liquidjs · fixed in 10.26.0
- CVE-2026-44645LiquidJS has a renderLimit DoS guard bypass via empty `{% for %}` bodynpm · liquidjs · fixed in 10.26.0
- CVE-2026-44644LiquidJS's strip_html filter bypass via newline characters in HTML tags enables XSSnpm · liquidjs · fixed in 10.26.0
- CVE-2026-48988markdown-it: Quadratic complexity DoS in smartquotes rule via replaceAt string operationsnpm · markdown-it · fixed in 14.2.0
- CVE-2026-48814Network-AI: Empty default secret still authorizes all requests (Incomplete fix for CVE-2026-46701)npm · network-ai · fixed in 5.7.2