Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-44240basic-ftp allows a malicious FTP server to cause client-side denial of service via unbounded multiline control response bufferingnpm · basic-ftp · fixed in 5.3.1
- CVE-2026-44232dssrf: every IPv6 category bypasses is_url_safenpm · dssrf · fixed in 1.0.3
- CVE-2026-44217sse-channel: SSE Injection via unsanitized event fieldsnpm · sse-channel · fixed in 4.0.1
- CVE-2026-42338ip-address: XSS in Address6 HTML-emitting methodsnpm · ip-address · fixed in 10.1.1
- CVE-2026-43929ssrfcheck: Server-Side Request Forgery (SSRF) and Incomplete List of Disallowed Inputsnpm · ssrfcheck
- CVE-2026-42045LobeHub: Cross-Site Scripting(XSS) escalate to Remote Code Execution(RCE)npm · @lobehub/lobehub
- CVE-2026-42260Open-WebSearch: SSRF in `fetchWebContent` MCP tool: bracketed IPv6 literals and non-resolving hostname check bypass `isPrivateOrLocalHostname`npm · open-websearch · fixed in 2.1.7
- CVE-2026-43930Parse Server: MFA SMS one-time password accepted twice under concurrent loginnpm · parse-server · fixed in 9.9.0-alpha.2, 8.6.76
- CVE-2026-45091sealed-env: TOTP secret embedded in unseal token payload (enterprise mode)npm · sealed-env · fixed in 0.1.0-alpha.4
- CVE-2026-8162multiparty vulnerable to Denial of Service via Uncaught Exception in filename* parameter parsingnpm · multiparty · fixed in 4.3.0
- CVE-2026-8161multiparty vulnerable to Denial of Service via Prototype Pollution leading to Uncaught Exceptionnpm · multiparty · fixed in 4.3.0
- CVE-2026-8159multiparty vulnerable to ReDoS via filename parsingnpm · multiparty · fixed in 4.3.0
- CVE-2026-6402webpack-dev-server vulnerable to cross-origin source code exposure on non-HTTPS originsnpm · webpack-dev-server · fixed in 5.2.4
- CVE-2026-45321Malware in 42 @tanstack/* packages exfiltrates cloud credentials, GitHub tokens, and SSH keysnpm · @tanstack/arktype-adapter, @tanstack/eslint-plugin-router +40 · fixed in 1.166.16, 1.161.13, 0.0.8 and more
- CVE-2025-65719An issue in Open Source Kubectl MCP Server v1.1.1 allows attackers to execute arbitrary code on a victim system via user interaction with a npm · kubectl-mcp-server · fixed in 1.2.0
- CVE-2026-43897Link Preview JS: vunerable to IPv6 and internal loopback attacksnpm · link-preview-js · fixed in 4.0.1
- CVE-2026-43893exiftool-vendored: Argument injection via newline characters in tag namesnpm · exiftool-vendored · fixed in 35.19.0
- CVE-2026-42565@workos/authkit-session: Open Redirect via state-derived redirect targetnpm · @workos/authkit-session · fixed in 0.5.1
- CVE-2026-45222Summarize Insecure Daemon Configuration File Permissionsnpm · @steipete/summarize · fixed in 0.15.0
- CVE-2026-43995Flowise: SSRF Protection Bypass via Direct node-fetch / axios Usage (Patch Enforcement Failure)npm · flowise, flowise-components · fixed in 3.1.0
- CVE-2026-42856Network-AI: Missing authentication on MCP HTTP endpoint allows unauthenticated privileged tool callsnpm · network-ai · fixed in 5.1.3
- CVE-2026-45006OpenClaw < 2026.4.23 - Unsafe Config Mutation via Gateway Tool Denylist Bypassnpm · openclaw · fixed in 2026.4.23
- CVE-2026-45005OpenClaw < 2026.4.23 - Webhook Route Secret Cache Not Invalidated After Rotationnpm · openclaw · fixed in 2026.4.23
- CVE-2026-45004OpenClaw < 2026.4.23 - Arbitrary Code Execution via setup-api.js in Current Working Directorynpm · openclaw · fixed in 2026.4.23
- CVE-2026-45003OpenClaw < 2026.4.22 - Connector Endpoint Host Override via Workspace dotenv Filesnpm · openclaw · fixed in 2026.4.22
- CVE-2026-45002OpenClaw < 2026.4.20 - Hook Session-Key Bypass via Template Mappingnpm · openclaw · fixed in 2026.4.20
- CVE-2026-45001OpenClaw < 2026.4.20 - Gateway Config Mutation Guard Bypass via Agent Tool Accessnpm · openclaw · fixed in 2026.4.20
- CVE-2026-45000OpenClaw < 2026.4.20 - Server-Side Request Forgery via Browser CDP Profile Creationnpm · openclaw · fixed in 2026.4.20
- CVE-2026-44999OpenClaw < 2026.4.20 - Improper Trust Labeling in Isolated Cron Awareness Eventsnpm · openclaw · fixed in 2026.4.20
- CVE-2026-44998OpenClaw < 2026.4.20 - Tool Policy Bypass via Bundled MCP/LSP Toolsnpm · openclaw · fixed in 2026.4.20