Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-48147Budibase: Unanchored Regex in `matchers.ts` Allows CSRF Bypass via Query String Injection in Budibase Workernpm · @budibase/backend-core · fixed in 3.35.4
- CVE-2026-48148Budibase: Unvalidated VectorDB Host Parameter Enables SSRFnpm · @budibase/server · fixed in 3.35.3
- CVE-2026-45548Budibase: SSRF in AI Extract File Automation Step via Missing IP Blacklist Validationnpm · @budibase/server · fixed in 3.34.8
- CVE-2026-45715Budibase: SSRF Bypass via HTTP Redirect in REST Datasource Integrationnpm · @budibase/server · fixed in 3.38.1
- CVE-2026-45716Budibase: Builder-to-Admin Privilege Escalation via onboardUsers Endpoint Without SMTP Configurationnpm · @budibase/worker · fixed in 3.38.1
- CVE-2026-45717Budibase: `PUT /api/datasources/:datasourceId` is protected only by `TABLE/READ` permission instead of builder access, allowing any authenticated app user to overwrite datasource connection parameters including host, port, and URL.npm · @budibase/server · fixed in 3.38.1
- CVE-2026-45718Budibase: Row Action Trigger Bypasses View Row Filter Security Boundary Allowing Action on Out-of-Scope Rowsnpm · budibase · fixed in 3.38.1
- CVE-2026-45719Budibase: CouchDB Reduce Injection via Unsanitized Calculation Parameter in V1 Views APInpm · @budibase/server · fixed in 3.38.1
- CVE-2026-46424Budibase: Missing Cache Invalidation on Public API Role Unassignment Allows Revoked Users to Retain Privileges for Up to 1 Hournpm · @budibase/backend-core · fixed in 3.38.2
- CVE-2026-46426Budibase: Unrestricted Upload of File with Dangerous Typenpm · budibase · fixed in 3.38.2
- CVE-2026-48128Budibase: SSRF via User-Controlled queryId in Automation Execute Query Stepnpm · budibase · fixed in 3.39.0
- CVE-2026-48146Budibase: SSRF via OAuth2 Config Validation — Missing fetchWithBlacklist Protectionnpm · @budibase/server · fixed in 3.39.0
- CVE-2026-48150Budibase: Workspace-scoped builder escalates to global admin via /api/public/v1/roles/assignnpm · @budibase/server · fixed in 3.39.0
- CVE-2026-48151Budibase: Webhook schema endpoint authorization bypass allows unauthenticated mutation of webhook and automation schemanpm · @budibase/server · fixed in 3.39.0
- CVE-2026-48152Budibase: Basic app users can exfiltrate stored REST datasource auth by rewriting datasource base URLnpm · @budibase/server · fixed in 3.39.0
- CVE-2026-48153Budibase: SSRF via OAuth2 token endpoint URL reaches internal hosts and cloud metadatanpm · @budibase/server · fixed in 3.39.0
- CVE-2026-45061Budibase: SSRF via trivial `.tar.gz` substring bypass in Plugin URL upload (`/api/plugin`)npm · budibase · fixed in 3.35.10
- CVE-2026-44483RVF: Prototype pollution in @rvf/set-get reachable via @rvf/core preprocessFormData (HTTP form data)npm · @rvf/set-get · fixed in 7.0.2, 6.0.4
- CVE-2026-44902opentelemetry-js: Prometheus exporter process crash via malformed HTTP requestnpm · @opentelemetry/auto-instrumentations-node, @opentelemetry/exporter-prometheus +1 · fixed in 0.75.0, 0.217.0
- CVE-2026-42280Improper Permission Checking in Auth.js SDKnpm · auth0-js · fixed in 10.0.0
- CVE-2026-44966Velocity.js: Prototype Pollution in #set path assignmentnpm · velocityjs
- CVE-2026-44895GitLab MCP Server: SSE transport has no authentication and wildcard CORS, exposing all GitLab toolsnpm · @yoda.digital/gitlab-mcp-server · fixed in 0.6.0
- CVE-2026-44214eventsource-encoder: SSE event injection via unsanitized event and id fieldsnpm · eventsource-encoder · fixed in 1.0.2
- CVE-2026-44728Improper Control of Generation of Code when compiling specifically crafted malicious code with @babel/plugin-transform-modules-systemjsnpm · @babel/plugin-transform-modules-systemjs · fixed in 7.29.4, 8.0.0-alpha.13
- CVE-2026-44680MikroORM: SQL injection via runtime-controlled identifiers and JSON-path keysnpm · @mikro-orm/knex, @mikro-orm/sql · fixed in 6.6.14, 7.0.14
- CVE-2026-9496Versions of the package pacote from 11.2.7 and before 21.5.1 are vulnerable to Denial of Service (DoS) via the addGitSha function.npm · pacote · fixed in 21.5.1
- CVE-2026-9495Versions of the package @koa/router from 14.0.0 and before 15.0.0 are vulnerable to Access Control Bypass due to the middleware being silentnpm · @koa/router · fixed in 15.0.0
- CVE-2026-9520blitz-js blitz Sign-in LoginForm.tsx cross site scriptingnpm · blitz
- CVE-2026-45249Apache ECharts: XSS in Lines series tooltip renderingnpm · echarts · fixed in 6.1.0
- CVE-2026-9358postcss-selector-parser AST Serialization container.js toString recursionnpm · postcss-selector-parser · fixed in 6.1.3, 7.1.3