Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2025-48067OctoPrint vulnerable to possible file extraction via upload endpointsPyPI · octoprint · fixed in 1.11.2
- CVE-2024-47081Requests vulnerable to .netrc credentials leak via malicious URLsPyPI · requests · fixed in 2.32.4
- CVE-2025-49653Exposure of sensitive Information allows account takeoverPyPI · backend-ai
- CVE-2025-49652Improper access control allows arbitrary account creationPyPI · backend-ai · fixed in 25.15.6, 25.19.0rc1
- CVE-2025-49651Missing Authorization for Interactive SessionsPyPI · backend-ai
- CVE-2025-49619Skyvern through 0.1.85 is vulnerable to server-side template injection (SSTI) in the Prompt field of workflow blocks such as the Navigation PyPI · skyvern
- CVE-2025-1793SQL Injection in run-llama/llama_indexPyPI · llama-index · fixed in 0.12.28
- CVE-2025-48432An issue was discovered in Django 5.2 before 5.2.3, 5.1 before 5.1.11, and 4.2 before 4.2.23.PyPI · django · fixed in 5.2.2, 5.1.10, 4.2.22
- CVE-2025-30167Jupyter Core on Windows Has Uncontrolled Search Path Element Local Privilege Escalation VulnerabilityPyPI · jupyter-core · fixed in 5.8.1
- CVE-2025-48995SignXML's signature verification with HMAC is vulnerable to a timing attackPyPI · signxml · fixed in 4.0.4
- CVE-2025-48994SignXML's signature verification with HMAC is vulnerable to an algorithm confusion attackPyPI · signxml · fixed in 4.0.4
- CVE-2025-48957AstrBot Has Path Traversal Vulnerability in /api/chat/get_filePyPI · astrbot · fixed in 3.5.13
- CVE-2025-1750SQL Injection in run-llama/llama_indexPyPI · llama-index, llama-index-vector-stores-duckdb · fixed in 0.12.21
- CVE-2018-25111django-helpdesk before 1.0.0 allows Sensitive Data Exposure because of os.umask(0) in models.py.PyPI · django-helpdesk · fixed in 1.0.0
- CVE-2025-48944vLLM Tool Schema allows DoS via Malformed pattern and type FieldsPyPI · vllm · fixed in 0.9.0
- CVE-2025-48943vLLM allows clients to crash the openai server with invalid regexPyPI · vllm · fixed in 0.9.0
- CVE-2025-48942vLLM DOS: Remotely kill vllm over http with invalid JSON schemaPyPI · vllm · fixed in 0.9.0
- CVE-2025-48887vLLM has a Regular Expression Denial of Service (ReDoS, Exponential Complexity) Vulnerability in `pythonic_tool_parser.py`PyPI · vllm · fixed in 0.9.0
- CVE-2025-48912Apache Superset: Improper authorization bypass on row level security via SQL InjectionPyPI · apache-superset · fixed in 4.1.2
- CVE-2025-48889Gradio Allows Unauthorized File Copy via Path ManipulationPyPI · gradio · fixed in 5.31.0
- CVE-2020-36846IO::Compress::Brotli versions prior to 0.007 for Perl have an integer overflow in the bundled Brotli C libraryPyPI · brotli · fixed in 1.0.8
- CVE-2025-46722vLLM has a Weakness in MultiModalHasher Image Hashing ImplementationPyPI · vllm · fixed in 0.9.0
- CVE-2025-46570vLLM’s Chunk-Based Prefix Caching Vulnerable to Potential Timing Side-ChannelPyPI · vllm · fixed in 0.9.0
- CVE-2025-5321aimhubio aim run_view Object query.py RestrictedPythonQuery privilege escalationPyPI · aim
- CVE-2025-5320gradio-app gradio CORS is_valid_origin privilege escalationPyPI · gradio
- CVE-2025-1753Command Injection in LLama-Index CLI in run-llama/llama_indexPyPI · llama-index, llama-index-cli · fixed in 0.4.1
- CVE-2025-5279Issue with Amazon Redshift Python Connector and the BrowserAzureOAuth2CredentialsProvider pluginPyPI · redshift-connector · fixed in 2.1.7
- CVE-2025-48383Django-Select2 Vulnerable to Widget Instance Secret Cache Key LeakingPyPI · django-select2 · fixed in 8.4.1
- CVE-2025-5175erdogant pypickle pypickle.py save improper authorizationPyPI · pypickle · fixed in 2.0.0
- CVE-2025-5174erdogant pypickle pypickle.py load deserializationPyPI · pypickle · fixed in 2.0.0