Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-111058Mercury: Unauthenticated Remote Code Execution via /api/kernelsPyPI · mercury · fixed in 3.2.6
- CVE-2026-111057Mercury: Unauthenticated Remote Code Execution in /api/terminals - access control bypassPyPI · mercury · fixed in 3.2.4
- CVE-2026-108372LoopX serve-status permissive CORS policy exposes control-plane state and private Markdown filesPyPI · loopx · fixed in 0.4.5
- CVE-2026-96620Claude Agent SDK: Argument Injection via resume Option Allows Arbitrary Command ExecutionPyPI · claude-agent-sdk · fixed in 0.2.121
- CVE-2026-111171Web3.py 7.15.0 through 7.16.0 and 8.0.0b2 through 8.0.0 CCIP-Read SSRF BypassPyPI · web3 · fixed in 7.15.0, 8.0.0b2
- CVE-2026-111170kedro-datasets 9.3.0 through 9.6.0 Path Traversal via MatplotlibDataset Plot NamePyPI · kedro-datasets · fixed in 9.3.0
- CVE-2026-62322Python Social Auth: Login CSRF in LINE backend (LineOAuth2) — missing OAuth state validation (incomplete fix of 5.0.0 campaign)PyPI · social-auth-core · fixed in 5.0.2
- CVE-2026-57496NetLicensing MCP Server: REST Path Traversal Bypasses Token RedactionPyPI · netlicensing-mcp · fixed in 0.1.8
- CVE-2026-104266tinytag: Infinite loop when parsing certain M4A files containing invalid atomsPyPI · tinytag · fixed in 2.3.0
- CVE-2026-110860GitPython 3.1.62 before 3.2.0 Symlink Path Traversal via Submodule.move()PyPI · gitpython · fixed in 3.2.0
- CVE-2026-110859GitPython before 3.2.0 Arbitrary File Read via Head.checkout() Branch NamePyPI · gitpython · fixed in 3.2.0
- CVE-2026-110858GitPython 3.1.30 before 3.2.0 Command Injection via Remote.pull() RefspecPyPI · gitpython · fixed in 3.2.0
- CVE-2026-110857GitPython before 3.2.0 Command Execution via ls_remote ext:: URLsPyPI · gitpython · fixed in 3.2.0
- CVE-2026-110856GitPython before 3.2.0 ReDoS via _re_actor_epoch in parse_actor_and_datePyPI · gitpython · fixed in 3.2.0
- CVE-2026-110855GitPython before 3.2.0 Environment Variable Disclosure via .gitmodules Submodule NamePyPI · gitpython · fixed in 3.2.0
- CVE-2026-102682Pipecat: Public exposure of Pipecat’s development runner can allow unauthenticated bot session creationPyPI · pipecat-ai · fixed in 1.6.0
- CVE-2026-55786Flyto2 Core: Unauthenticated Command Execution via HTTP MCP `execute_module`PyPI · flyto-core · fixed in 2.26.4
- CVE-2026-55787Flyto2 Core: SSRF guard bypass via IPv6 transition addresses (IPv4-mapped / 6to4 / NAT64) in validate_url_ssrfPyPI · flyto-core · fixed in 2.26.3
- CVE-2026-59951MCP Python SDK: Unbounded Session Accumulation in StreamableHTTP Transport Enables Resource ExhaustionPyPI · mcp · fixed in 1.30.0, 2.2.0
- CVE-2026-100169Account pre-hijacking in the Prowler API through email based social account linking without verificationPyPI · prowler-cloud · fixed in 5.30.3
- CVE-2026-104250unstructured: Stored XSS via unescaped HTML generationPyPI · unstructured · fixed in 0.24.1
- CVE-2026-49264OAuthLib: Unsafe JSONP callback injection in RevocationEndpoint allows arbitrary JavaScript response generationPyPI · oauthlib · fixed in 4.0.0
- CVE-2026-49265OAuthLib: Timing Attack Vulnerability in PKCE code_verifier ComparisonPyPI · oauthlib · fixed in 4.0.0
- CVE-2026-102734asteval sandbox escape: arbitrary native memory read/write via numpy ctypes in default asteval InterpreterPyPI · asteval · fixed in 1.0.9
- CVE-2026-102832JupyterLab: Command link trust prompt in JupyterLab can trust a document other than the one clickedPyPI · jupyterlab, jupyterlite-core +1 · fixed in 4.6.4, 4.5.11, 0.8.4 and more
- CVE-2026-109956NLTK through 3.10.3 Path Traversal via WekaClassifier Model PathPyPI · nltk · fixed in 3.10.4
- CVE-2026-57118PraisonAI AgentTeam.launch exposes unauthenticated remote agent listing and invocation endpointsPyPI · praisonaiagents · fixed in 1.6.59
- CVE-2026-57143PraisonAI: Server-Side Request Forgery (SSRF) in SearxNG / search_web tools via attacker-controlled searxng_url parameterPyPI · praisonaiagents · fixed in 1.6.61
- CVE-2026-104102copyparty FTP: upload outside defined volumes (limited path traversal)PyPI · copyparty · fixed in 1.20.19
- CVE-2026-108258Shiny for Python - Path traversal in bookmark restorePyPI · shiny · fixed in 1.6.4