Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-11572Versions of the package degit before 2.8.6, from 3.0.0 and before 3.3.1 are vulnerable to Command Injection due to improper sanitisation of npm · degit · fixed in 2.8.6, 3.3.1
- CVE-2026-46490samlify: XML Injection in AttributeValue Allows Privilege Escalation in Signed SAML Assertionsnpm · samlify · fixed in 2.13.0
- CVE-2026-11393Code injection via improper triple-quote escaping in AgentCore CLI Bedrock Agent importnpm · @aws/agentcore · fixed in 0.14.2, 1.0.0-preview.9
- CVE-2026-46480Flowise: Evaluator create+update mass-assignment allows cross-workspace evaluator takeovernpm · flowise · fixed in 3.1.2
- CVE-2026-46479Flowise: Evaluation create+update mass-assignment allows cross-workspace evaluation takeovernpm · flowise · fixed in 3.1.2
- CVE-2026-46478Flowise: DatasetRow create+update mass-assignment allows cross-workspace row takeovernpm · flowise · fixed in 3.1.2
- CVE-2026-46477Flowise: Dataset create+update mass-assignment allows cross-workspace dataset takeovernpm · flowise · fixed in 3.1.2
- CVE-2026-46476Flowise: CustomTemplate create+update mass-assignment allows cross-workspace template takeovernpm · flowise · fixed in 3.1.2
- CVE-2026-46475Flowise: Assistant create+update mass-assignment allows cross-workspace assistant takeovernpm · flowise · fixed in 3.1.2
- CVE-2026-46443Flowise: Credential Data Leaknpm · flowise · fixed in 3.1.2
- CVE-2026-46442Flowise: Authenticated Host RCE via POST /api/v1/node-custom-function and NodeVM Sandbox Escapenpm · flowise · fixed in 3.1.2
- CVE-2026-46441Flowise: Mass Assignment in Assistant Update Endpoint Allows Cross-Workspace Resource Reassignmentnpm · flowise · fixed in 3.1.2
- CVE-2026-46440Flowise: Basic Auth Credentials Exposed via APInpm · flowise · fixed in 3.1.2
- CVE-2026-42863Flowise: Mass Assignment in Chatflow Update Endpoint Allows Cross-Workspace AgentFlow Reassignmentnpm · flowise · fixed in 3.1.2
- CVE-2026-42862Flowise: Mass Assignment in Tool Update Endpoint Allows Cross-Workspace Resource Reassignmentnpm · flowise · fixed in 3.1.2
- CVE-2026-42861Flowise: Mass Assignment in Variable Update Endpoint Allows Cross-Workspace Resource Reassignmentnpm · flowise · fixed in 3.1.2
- CVE-2026-46444Flowise: Vector Store No Permission Checksnpm · flowise · fixed in 3.1.2
- CVE-2026-47430Cordova Plugin InAppBrowser: iOS: Arbitrary Cordova callback IDs can be dispatched without validation from InAppBrowser WebViewsnpm · cordova-plugin-inappbrowser · fixed in 6.0.1
- CVE-2026-46357HAX CMS NodeJS application Vulnerable to Denial of Service using Malicious Import Requestnpm · @haxtheweb/haxcms-nodejs · fixed in 26.0.0
- CVE-2026-46496HAX CMS: Stored XSS via '<video-player>' component allows arbitrary JavaScript execution and token theftnpm · @haxtheweb/haxcms-nodejs, @haxtheweb/video-player · fixed in 26.0.0
- CVE-2026-46396HAX CMS has a stored XSS via <iframe> that allows access to sensitive client-side data and account takeovernpm · @haxtheweb/haxcms-nodejs, @haxtheweb/iframe-loader +1 · fixed in 26.0.0
- CVE-2026-46511HAXcms: Mass Token Exfiltration and Cross-Tenant Hijacknpm · @haxtheweb/haxcms-nodejs · fixed in 26.0.0
- CVE-2026-46395HAX CMS Vulnerable to Private Key Disclosure via Broken HMAC Implementationnpm · @haxtheweb/haxcms-nodejs · fixed in 26.0.0
- CVE-2026-46393HAXcms createSite SSRF Enables Arbitrary File Readnpm · @haxtheweb/haxcms-nodejs · fixed in 26.0.0
- CVE-2026-46391HAX open-apis: Credential Theft via Server-Side Request Forgery (SSRF) in open-apisnpm · @haxtheweb/open-apis · fixed in 26.0.0
- CVE-2026-11330thedotmack claude-mem Observation Content Hash store.ts computeObservationContentHash weak hashnpm · claude-mem · fixed in 12.0.0
- CVE-2026-10732All versions of the package decompress are vulnerable to Arbitrary File Write via Archive Extraction (Zip Slip) when extracting a ZIP archivnpm · decompress
- CVE-2026-10802keystonejs keystone GraphQL API Endpoint output-field.ts resource consumptionnpm · @keystone-6/core
- CVE-2026-5078morgan vulnerable to Log Forging via unneutralized control characters in :remote-usernpm · morgan · fixed in 1.11.0
- CVE-2026-10691wonderwhy-er DesktopCommanderMCP start_search search-manager.ts redosnpm · @wonderwhy-er/desktop-commander · fixed in 0.2.39