Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-107841pacioli: A submit consent marker licensed cancellation of caller-named pre-existing documentsPyPI · pacioli-guard · fixed in 0.10.0
- GHSA-R44W-V6GF-X3P6pyLoad has an authentication bypass in API key validation (check_apikey cache)PyPI · pyload-ng · fixed in 0.5.0b3.dev101
- CVE-2026-75597pyLoad: Unauthenticated access to /web/<path:filename> bypasses authentication on sensitive templates and leaks internal error details via exception attribute typoPyPI · pyload-ng · fixed in 0.5.0b3.dev101
- CVE-2026-48484pyLoad: Lack of Input Size Validation Leads to Denial of Service (DoS) and Process TerminationPyPI · pyload-ng · fixed in 0.5.0b3.dev101
- CVE-2026-107728Strawberry GraphQL: Synchronous permission checks can treat an awaitable authorization result as truthyPyPI · strawberry-graphql · fixed in 0.326.1
- CVE-2026-107727Strawberry legacy graphql-ws retains naturally completed subscription slotsPyPI · strawberry-graphql · fixed in 0.327.2
- CVE-2026-107717Banks: User-controlled prompt input can be parsed as privileged chat messagesPyPI · banks · fixed in 2.5.0
- CVE-2026-107716Banks: Symlink traversal and arbitrary file disclosure/overwrite in DirectoryPromptRegistryPyPI · banks · fixed in 2.5.1
- CVE-2026-106435Application denial of service via out-of-bounds read in BSON Regex decoding in MongoDB Python DriverPyPI · pymongo · fixed in 4.18.3
- CVE-2026-107397Indico: Cross-Site-Scripting in minutes editorPyPI · indico · fixed in 3.3.13
- CVE-2026-107396Indico: Cross-Site-Scripting in link fieldsPyPI · indico · fixed in 3.3.13
- CVE-2026-107395Indico: Missing access check in legacy session export APIPyPI · indico · fixed in 3.3.13
- CVE-2026-107394Indico: Incomplete Server-Side Request Forgery (SSRF) checkPyPI · indico · fixed in 3.3.13
- CVE-2026-107378CairoSVG: Quadratic-time DoS parsing a crafted SVG <path>PyPI · cairosvg · fixed in 2.9.1
- CVE-2026-107377datamodel-code-generator: Protobuf weak-import path traversal allows files to be written outside the temporary directoryPyPI · datamodel-code-generator · fixed in 0.81.0
- CVE-2026-107295`pydantic-ai-slim` web UI `/api/chat` accepts browser-simple cross-origin requests that can trigger agent tool executionPyPI · pydantic-ai, pydantic-ai-slim · fixed in 1.107.4, 2.28.0
- CVE-2026-107294Pydantic AI: Unbounded memory use when downloading remote content via web_fetch or FileUrlPyPI · pydantic-ai, pydantic-ai-slim · fixed in 1.107.2, 2.24.0
- CVE-2026-107293Pydantic AI OpenTelemetry instrumentation: retry prompt content is not redacted when `include_content=False`PyPI · pydantic-ai, pydantic-ai-slim · fixed in 1.107.4, 2.27.1
- CVE-2026-107292Pydantic AI Web chat UI (`Agent.to_web()`, `clai web`): the local chat endpoint does not validate the `Host` headerPyPI · pydantic-ai, pydantic-ai-slim · fixed in 1.107.5, 2.30.0
- CVE-2026-107291Pydantic AI OpenTelemetry instrumentation: exception events on tool and agent run spans include content when `include_content=False`PyPI · pydantic-ai, pydantic-ai-slim · fixed in 1.107.6, 2.44.0
- CVE-2026-107290Pydantic AI: Event loop blocked by quadratic title extraction in `web_fetch`PyPI · pydantic-ai, pydantic-ai-slim · fixed in 1.107.6, 2.44.0
- CVE-2026-107289Pydantic AI: SSRF cloud-metadata blocklist bypass via IPv6 zone identifier (incomplete fix for CVE-2026-46678 and CVE-2026-48782)PyPI · pydantic-ai, pydantic-ai-slim · fixed in 1.107.6, 2.44.0
- CVE-2026-107287Pydantic AI: Excessive resource use when local web fetching converts nested HTMLPyPI · pydantic-ai, pydantic-ai-slim · fixed in 1.107.7, 2.52.0
- CVE-2026-107286Pydantic AI: Concurrency-limited models can keep their slot when a streamed request ends earlyPyPI · pydantic-ai, pydantic-ai-slim · fixed in 2.53.0
- CVE-2026-62176PraisonAI: Code Injection via f-string Interpolation in Deploy API Server GenerationPyPI · praisonai · fixed in 4.6.78
- CVE-2026-62179PraisonAI: Platform members can delete owner issue dependencies through member-owned related issuesPyPI · praisonai-platform · fixed in 0.1.9
- CVE-2026-46438wger: Cross-User Data Corruption via Missing Ownership Check on WorkoutLog.slot_entryPyPI · wger
- CVE-2026-46437wger: API credentials remain valid after logout/password changePyPI · wger
- CVE-2026-46434wger: Trainer Privilege Escalation - Improper Privilege ManagementPyPI · wger
- CVE-2026-45161wger: trainer_login accepts GET - CSRF bypass enables forced session rebindingPyPI · wger