Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2025-46726Langroid Vulnerable to XXE Injection via XMLToolMessagePyPI · langroid · fixed in 0.53.4
- CVE-2025-46719Open WebUI vulnerable to stored XSS via unescaped markdown token in MarkdownTokens.svelte leading to full account takeover and RCE via functionsPyPI · open-webui · fixed in 0.6.6
- CVE-2025-46571Open WebUI vulnerable to limited stored XSS vila uploaded html filePyPI · open-webui · fixed in 0.6.6
- CVE-2025-46335Mobile Security Framework (MobSF) Allows Stored Cross Site Scripting (XSS) via malicious SVG Icon UploadPyPI · mobsf · fixed in 4.3.3
- CVE-2025-24977OpenCTI has remote code execution and sensitive secrets exposed through web hookPyPI · pycti · fixed in 6.4.11
- CVE-2025-29573Cross-Site Scripting (XSS) vulnerability exists in Mezzanine CMS 6.0.0 in the "View Entries" feature within the Forms module.PyPI · mezzanine
- CVE-2025-47241In browser-use (aka Browser Use) before 0.1.45, URL parsing of allowed_domains is mishandled because userinfo can be placed in the authorityPyPI · browser-use · fixed in 0.1.45
- CVE-2025-46567LLaMA-Factory Allows Arbitrary Code Execution via Unsafe Deserialization in Ilamafy_baichuan2.pyPyPI · llamafactory · fixed in 0.9.3
- CVE-2025-24887OpenCTI bypass of protected attribute updatePyPI · pycti · fixed in 6.4.11
- CVE-2025-32444vLLM Vulnerable to Remote Code Execution via Mooncake IntegrationPyPI · vllm · fixed in 0.8.5
- CVE-2025-46560vLLM phi4mm: Quadratic Time Complexity in Input Token Processing leads to denial of servicePyPI · vllm · fixed in 0.8.5
- CVE-2025-30202Data exposure via ZeroMQ on multi-node vLLM deploymentPyPI · vllm · fixed in 0.8.5
- CVE-2025-1194Regular Expression Denial of Service (ReDoS) in huggingface/transformersPyPI · transformers · fixed in 4.50.0
- CVE-2025-4032inclusionAI AWorld shell_tool.py subprocess.Popen os command injectionPyPI · aworld
- CVE-2025-46656python-markdownify (aka markdownify) before 0.14.1 allows large headline prefixes such as <h9999999> in addition to <h1> through <h6>.PyPI · markdownify · fixed in 0.14.1
- CVE-2025-43859h11 accepts some malformed Chunked-Encoding bodiesPyPI · h11 · fixed in 0.16.0
- CVE-2025-46417The unsafe globals in Picklescan before 0.0.25 do not include ssl.PyPI · picklescan · fixed in 0.0.25
- CVE-2025-32788OctoPrint Authenticated Reverse Proxy Page Authentication BypassPyPI · octoprint · fixed in 1.11.0
- CVE-2025-32377Rasa Pro Missing Authentication For Voice Connector APIsPyPI · rasa-pro · fixed in 3.12.6, 3.11.7, 3.10.19 and more
- CVE-2025-32434PyTorch: `torch.load` with `weights_only=True` leads to remote code executionPyPI · torch · fixed in 2.6.0
- CVE-2025-28197Crawl4AI <=0.4.247 is vulnerable to SSRF in /crawl4ai/async_dispatcher.py.PyPI · crawl4ai
- CVE-2024-53924Pycel through 1.0b30, when operating on an untrusted spreadsheet, allows code execution via a crafted formula in a cell, such as one beginniPyPI · pycel
- CVE-2025-3730PyTorch LossCTC.cpp torch.nn.functional.ctc_loss denial of servicePyPI · torch · fixed in 2.8.0
- CVE-2024-53305An issue in the component /models/config.py of Whoogle search v0.9.0 allows attackers to execute arbitrary code via supplying a crafted searPyPI · whoogle-search · fixed in 0.9.1
- CVE-2025-32021Weblate VCS credentials included in URL parameters are potentially logged and saved into browser history as plaintextPyPI · weblate · fixed in 5.11
- CVE-2025-32428Jupyter Remote Desktop Proxy makes TigerVNC accessible via the network and not just via a UNIX socket as intendedPyPI · jupyter-remote-desktop-proxy · fixed in 3.0.1
- CVE-2025-3549Open Asset Import Library Assimp File MD3Loader.cpp ValidateSurfaceHeaderOffsets heap-based overflowPyPI · pyassimp
- CVE-2025-32381Denial of Service by abusing xgrammar unbounded cache in memoryPyPI · xgrammar · fixed in 0.1.18
- CVE-2025-32375Insecure Deserialization leads to RCE in BentoML's runner serverPyPI · bentoml · fixed in 1.4.8
- CVE-2025-3248Langflow < 1.3.0 Unauthenticated RCE via /api/v1/validate/codePyPI · langflow, langflow-base · fixed in 1.3.0, 0.3.0