Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2025-27516Jinja sandbox breakout through attr filter selecting format methodPyPI · jinja2 · fixed in 3.1.6
- CVE-2025-25362A Server-Side Template Injection (SSTI) vulnerability in Spacy-LLM v0.7.2 allows attackers to execute arbitrary code via injecting a craftedPyPI · spacy-llm · fixed in 0.7.3
- CVE-2025-1889picklescan - Security scanning bypass via non-standard file extensionsPyPI · picklescan · fixed in 0.0.22, 0.0.21
- CVE-2025-25302Rembg CORS misconfigurationPyPI · rembg · fixed in 2.0.58
- CVE-2025-25301Rembg allows SSRF via /api/removePyPI · rembg · fixed in 2.0.58
- CVE-2025-24023Observable Response Discrepancy in flask-appbuilderPyPI · flask-appbuilder · fixed in 4.5.3
- CVE-2024-24778Apache StreamPipes: Resources Permission EscalationPyPI · streampipes · fixed in 0.97.0
- CVE-2025-1300Open redirect in CodeChecker web serverPyPI · codechecker · fixed in 6.24.6
- CVE-2025-27154Spotipy's cache file, containing spotify auth token, is created with overly broad permissionsPyPI · spotipy · fixed in 2.25.1
- CVE-2025-1716picklescan - Security scanning bypass via 'pip main'PyPI · picklescan · fixed in 0.0.22, 0.0.21
- CVE-2023-25574JupyterHub's LTI13Authenticator: JWT signature not validatedPyPI · jupyterhub-ltiauthenticator · fixed in 1.4.0
- CVE-2025-27145copyparty renders unsanitized filenames as HTML when user uploads empty filesPyPI · copyparty · fixed in 1.16.15
- CVE-2025-26622sqrt doesn't define rounding behavior in VyperPyPI · vyper · fixed in 0.4.1
- CVE-2025-27104double eval in For List Iter in VyperPyPI · vyper · fixed in 0.4.1
- CVE-2025-27105AugAssign evaluation order causing OOB write within the object in VyperPyPI · vyper · fixed in 0.4.1
- CVE-2025-1403Qiskit SDK denial of servicePyPI · qiskit, qiskit-terra · fixed in 1.3.0
- CVE-2025-26623Use After Free in Exiv2PyPI · exiv2 · fixed in 0.28.5
- CVE-2025-25305SSL validation for outgoing requests in Home Assistant Core and used libs not correctPyPI · homeassistant · fixed in 2024.1.6
- CVE-2025-25297Label Studio allows Server-Side Request Forgery in the S3 Storage EndpointPyPI · label-studio · fixed in 1.16.0
- CVE-2025-25296Label Studio allows Cross-Site Scripting (XSS) via GET request to `/projects/upload-example` endpointPyPI · label-studio · fixed in 1.16.0
- CVE-2025-25295Label Studio has a Path Traversal Vulnerability via image FieldPyPI · label-studio-sdk · fixed in 1.0.10
- CVE-2024-12797RFC7250 handshakes with unauthenticated servers don't abort as expectedPyPI · cryptography · fixed in 44.0.1
- CVE-2024-12366CVE-2024-12366PyPI · pandasai
- CVE-2024-8550Local File Inclusion (LFI) in modelscope/agentscopePyPI · agentscope
- CVE-2025-25183vLLM using built-in hash() from Python 3.12 leads to predictable hash collisions in vLLM prefix cachePyPI · vllm · fixed in 0.7.2
- CVE-2025-23217Mitmweb API Authentication Bypass Using Proxy ServerPyPI · mitmproxy · fixed in 11.1.2
- CVE-2025-24803Stored Cross-Site Scripting (XSS) in MobSFPyPI · mobsf · fixed in 4.3.1
- CVE-2025-24804Partial Denial of Service (DoS) in MobSFPyPI · mobsf · fixed in 4.3.1
- CVE-2025-24805Local Privilege Escalation in MobSFPyPI · mobsf · fixed in 4.3.1
- CVE-2025-24372XSS vector in user uploaded images in group/org and user profiles in ckanPyPI · ckan · fixed in 2.10.7, 2.11.2