Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-125113XRootD: Path traversal in directory listing allows access to the parent directory via trailing ".." patternPyPI · xrootd · fixed in 5.9.2
- CVE-2026-102289zizmor: Debug logging prints available GitHub credentials in cleartextPyPI · zizmor · fixed in 1.28.0
- CVE-2026-125106Wagtail: Improper restriction handling on Page translation API endpointPyPI · wagtail · fixed in 7.0.9, 7.3.4, 7.4.3 and more
- CVE-2026-123819Wagtail: Improper permission handling when copying snippetsPyPI · wagtail · fixed in 7.0.9, 7.3.4, 7.4.3 and more
- CVE-2026-123818LMDeploy URL parser disagreement permits SSRF filter bypassPyPI · lmdeploy · fixed in 0.15.0
- CVE-2026-123815pyLoad: Tar extraction creates device nodes and FIFOs (member types not filtered; tarfile extractall without filter=)PyPI · pyload-ng
- CVE-2026-123814pyLoad WindowsPhoneNotify addon: non-admin SETTINGS user triggers SSRF via unguarded http.client notification hostPyPI · pyload-ng
- CVE-2026-123813pyLoad: Privilege revocation and password change through the REST API do not invalidate the user's sessionPyPI · pyload-ng
- CVE-2026-123806python-tuf: Platform-dependent delegation path matchingPyPI · tuf · fixed in 7.0.0
- CVE-2026-40913Apache Airflow: Import Errors API Leaks Unauthorized DAG Stack Traces via Incomplete Per-File RBAC EnforcementPyPI · apache-airflow-core · fixed in 3.4.0
- CVE-2026-50204Apache Airflow: Audit-log secrets masker redacts by key name only, persisting connection and Variable secrets in cleartextPyPI · apache-airflow, apache-airflow-core · fixed in 3.0.0, 3.4.0
- CVE-2026-68982Apache Airflow: CeleryExecutor: forged callback workloads run on Celery workers without workload-token validationPyPI · apache-airflow-core · fixed in 3.4.0
- CVE-2026-76185Apache Airflow Task SDK: Task SDK SecretCache: non-injective team cache key enables cross-team secret disclosure in multi-team modePyPI · apache-airflow-task-sdk · fixed in 1.4.0
- CVE-2026-86829Apache Airflow: Deserialization of task-controlled XCom values in the Scheduler during dependency evaluationPyPI · apache-airflow-core · fixed in 3.4.0
- CVE-2026-82337Apache Airflow: DeadlineAlert fields bypass plugin-registration gate for scheduler-side deserializationPyPI · apache-airflow-core · fixed in 3.4.0
- CVE-2026-86468Apache Airflow: CLI argv masking misses Variable values and --conn-extra, persisting secrets in audit logsPyPI · apache-airflow, apache-airflow-core · fixed in 3.0.0, 3.4.0
- CVE-2026-96285Apache Airflow: Scheduler: next_kwargs deserialized before the dict check, so resume data still invokes constructorsPyPI · apache-airflow-core · fixed in 3.4.0
- CVE-2026-113508Apache Airflow: Logout token revocation fails open; errors silently swallowedPyPI · apache-airflow-core · fixed in 3.4.0
- CVE-2026-101031Apache Airflow: Shell command injection in the example_dag_decorator example Dag via an IPv6 zone identifierPyPI · apache-airflow-core · fixed in 3.4.0
- CVE-2026-113504Apache Airflow: Secrets masker: pattern-based masking bounded at depth 5 returns deeply-nested registered secrets in cleartextPyPI · apache-airflow, apache-airflow-core · fixed in 3.0.0, 3.4.0
- CVE-2026-107474Apache Airflow: Connections API: apprise connection "config" extra returned in cleartextPyPI · apache-airflow, apache-airflow-core · fixed in 3.0.0, 3.4.0
- CVE-2026-111395Apache Airflow: Reserved serialization keys in Dag run conf crash the scheduler or are rebuilt as objects in the Triggerer via deadline…PyPI · apache-airflow-core · fixed in 3.4.0
- CVE-2026-111421Apache Airflow: Execution API: set_xcom skips the reserved-key check, so task-written XComs instantiate airflow. classes on the API serverPyPI · apache-airflow-core · fixed in 3.4.0
- CVE-2026-111452Apache Airflow: Secrets masker: camelCase key names (privateKey, connectionString, webhookUrl) not matched against the sensitive-field listPyPI · apache-airflow, apache-airflow-core · fixed in 3.0.0, 3.4.0
- CVE-2026-111453Apache Airflow: API: asset queuedEvents DELETE checks Dag edit on a ?dag_id query value but deletes rows for every readable DagPyPI · apache-airflow-core · fixed in 3.4.0
- CVE-2026-111454Apache Airflow: API: asset endpoints return scheduled/producing/consuming Dag IDs the caller cannot readPyPI · apache-airflow, apache-airflow-core · fixed in 3.0.0, 3.4.0
- CVE-2026-111455Apache Airflow: Connections API: async connection test authorizes create at enqueue but overwrites a later-created connection at commitPyPI · apache-airflow-core · fixed in 3.4.0
- CVE-2026-123870[Eclipse CSI - otterdog] Unauthenticated remote code execution via eval() on format-string-injected webhook body when…PyPI · otterdog · fixed in 1.3.2
- CVE-2026-103022Urwid: handle_short_request() crashes on non-ASCII POST body (UnicodeEncodeError DoS)PyPI · urwid · fixed in 4.0.7
- CVE-2026-102610fast-agent: `fast-agent serve` binds HTTP to 0.0.0.0 with no authentication by default; with --shell this is unauthenticated remote…PyPI · fast-agent-mcp · fixed in 0.7.21