Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-41149Mermaid: Improper sanitization of `classDef` in state diagrams leads to HTML injectionnpm · mermaid · fixed in 11.15.0, 10.9.6
- CVE-2026-41148Mermaid: Improper sanitization of `classDefs` in diagrams leads to CSS injectionnpm · mermaid · fixed in 11.15.0, 10.9.6
- CVE-2026-39964TypeBot: Stored XSS via javascript: URI in text bubble links — bot author executes JS on visitors' browsersnpm · @typebot.io/js · fixed in 0.10.1
- CVE-2026-28445Typebot: Stored XSS via Rating Block Custom Icon Bypasses isUnsafe Sandbox in Builder Previewnpm · @typebot.io/js · fixed in 0.10.1
- CVE-2026-9277shell-quote `quote()` does not validate object-token shapes, allowing command injection via line terminators in `.op`npm · shell-quote · fixed in 1.8.4
- CVE-2026-26028CryptPad: Sanitizer Bypass in Diffmarked.js Allows Arbitrary HTML Injection and Potential XSSnpm · cryptpad
- CVE-2026-47099TeleJSON < 6.0.0 DOM-based XSS via parse() Functionnpm · telejson · fixed in 6.0.0
- CVE-2026-30691Cross-Site Scripting (XSS) vulnerability in @cyntler/react-doc-viewer v1.17.1 allows remote attackers to execute arbitrary JavaScript via a npm · @cyntler/react-doc-viewer
- CVE-2026-8814Versions of the package exifreader before 4.39.0 are vulnerable to Improper Handling of Highly Compressed Data (Data Amplification) due to dnpm · exifreader · fixed in 4.39.0
- CVE-2026-8813This affects versions of the package exifreader before 4.39.0.npm · exifreader · fixed in 4.39.0
- CVE-2026-25244WebdriverIO has Command Injection in the BrowserStack Servicenpm · @wdio/browserstack-service · fixed in 9.24.0
- CVE-2026-22810Joplin: Path traversal in OneNote importer allows overwriting arbitrary filesnpm · @joplin/onenote-converter · fixed in 3.5.7
- CVE-2026-45245Summarize < 0.15.1 Unauthorized Daemon Request via Untrusted Eventsnpm · @steipete/summarize · fixed in 0.15.1
- CVE-2026-45244Summarize < 0.15.1 Unapproved Browser Automation Executionnpm · @steipete/summarize · fixed in 0.15.0
- CVE-2026-45242Summarize < 0.15.1 Path Traversal via slidesDir Parameternpm · @steipete/summarize · fixed in 0.15.0
- CVE-2026-45243Summarize < 0.15.1 Browser Extension Missing Authorization via Content Scriptnpm · @steipete/summarize · fixed in 0.15.0
- CVE-2025-57282ngrok v4.3.3 and 5.0.0-beta.2 is vulnerable to Command Injection.npm · ngrok
- CVE-2026-8769vercel ai provider-utils response-handler.ts createJsonErrorResponseHandler resource consumptionnpm · @ai-sdk/provider-utils · fixed in 3.0.28, 4.0.33, 5.0.1
- CVE-2026-8766Kilo-Org kilocode Environment Variable config.ts load information disclosurenpm · @kilocode/cli
- CVE-2026-8723qs.stringify crashes on null/undefined entries in comma-format arrays under encodeValuesOnlynpm · qs · fixed in 6.15.2
- CVE-2026-8657Versions of the package jsondiffpatch before 0.7.6 are vulnerable to Prototype Pollution via the jsondiffpatch.patch() and jsondiffpatch/fornpm · jsondiffpatch · fixed in 0.7.6
- CVE-2026-45665Open WebUI: Stored XSS in Banner Component via Improper Sanitization Ordernpm · open-webui · fixed in 0.8.0
- CVE-2026-45346Open WebUI: Stored Cross-Site Scripting in SVG Renderernpm · open-webui · fixed in 0.6.31
- CVE-2026-45395Open WebUI: Missing `workspace.tools` Authorization Check on Tool Update Endpoint Allows Privilege Escalation to Code Executionnpm · open-webui · fixed in 0.9.5
- CVE-2026-44721Open WebUI: Stored XSS via Model Descriptionnpm · open-webui · fixed in 0.9.0
- CVE-2026-45773Turborepo: Login callback CSRF/session fixationnpm · turbo · fixed in 2.9.14
- CVE-2026-45772Turborepo: Unexpected local code execution during Yarn Berry detectionnpm · @turbo/codemod, @turbo/workspaces +1 · fixed in 2.9.14
- CVE-2026-45736ws: Uninitialized memory disclosurenpm · ws · fixed in 8.20.1
- CVE-2026-38728An issue in Nodemailer smtp_server before v.3.18.3 allows a remote attacker to cause a denial of service via the SMTPStream._write, lib/smtpnpm · smtp-server · fixed in 3.18.3
- CVE-2026-27886Strapi may leak sensitive data via relational filtering due to lack of query sanitizationnpm · @strapi/strapi · fixed in 5.37.0