Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-43976wger: cross-tenant admin notes/contracts leak via gym=None bypass (5 views)PyPI · wger
- CVE-2026-105192LMCache Unauthenticated RCE in multiprocess mode via pickle deserializationPyPI · lmcache · fixed in 0.5.6
- CVE-2026-106454Twisted: IMAP wildcardToRegexp() ReDoSPyPI · twisted
- CVE-2026-106443WeasyPrint: EPS images reach the Ghostscript interpreter resulting in RCEPyPI · weasyprint · fixed in 70.0
- CVE-2026-106442Hydra instantiate target blacklist bypasses permit code executionPyPI · hydra-core · fixed in 1.3.6, 1.4.0.dev9
- CVE-2026-106441Hydra logging configuration permits unsafe callable resolutionPyPI · hydra-core · fixed in 1.3.6, 1.4.0.dev9
- CVE-2026-106440Hydra: Optuna custom_search_space can resolve and execute untrusted callables via get_methodPyPI · hydra-optuna-sweeper · fixed in 1.3.0, 1.4.0.dev10
- CVE-2026-106439Hydra: Mutable instantiate policy sets allow target blocklist bypassPyPI · hydra-core · fixed in 1.3.7, 1.4.0.dev10
- CVE-2026-105801openapi-python-client: Malicious OpenAPI Documents can cause Arbitrary Code GenerationPyPI · openapi-python-client · fixed in 0.29.1
- CVE-2026-105922vllm-project vLLM Penalty utils.py get_token_bin_counts_and_mask denial of servicePyPI · vllm · fixed in 0.32.0
- CVE-2026-105782Scrapy: Arbitrary Module Import via Referrer-Policy Header in RefererMiddlewarePyPI · scrapy · fixed in 2.14.2
- CVE-2026-105760vLLM: GLMGA video sampling permits request-driven CPU and memory exhaustionPyPI · vllm · fixed in 0.30.0
- CVE-2026-105759vLLM: Unbounded Prometheus label cardinality from attacker-controlled HTTP method tokens in the vLLM Rust frontend metrics middleware (unauthenticated denial of service)PyPI · vllm · fixed in 0.30.0
- CVE-2026-105758vLLM: Qwen2-VL / Qwen3-VL video samplers bound on request-controlled max_frames, which the num_frames ceiling does not reachPyPI · vllm · fixed in 0.30.0
- CVE-2026-105757vLLM: Structured-output request errors escape the request boundary and terminate the shared EngineCore — engine-fatal denial of service (3 sites)PyPI · vllm · fixed in 0.30.0
- CVE-2026-105756vLLM: Loose `cache_salt` validation lets a single request kill EngineCore on LMCache-MP deployments — uncaught downstream `ValueError` denial of servicePyPI · vllm · fixed in 0.30.0
- CVE-2026-105755vLLM: Flash late-interaction scoring caches query embeddings under a caller-controlled request id — cross-request integrity break and induced errors on `/score` and `/rerank`PyPI · vllm · fixed in 0.30.0
- CVE-2026-105754vLLM: Scale-out disaggregated multimodal transport trusts caller-supplied featuresPyPI · vllm · fixed in 0.30.0
- CVE-2026-105753vLLM: Mirrored multimodal IPC caches desync after a rejected request — a later request reusing the same media hash trips a receiver assertion in the engine corePyPI · vllm · fixed in 0.28.0
- CVE-2026-105752vLLM: Harmony tool continuations drop `cache_salt` — restoring a cross-tenant prefix-cache membership oraclePyPI · vllm · fixed in 0.30.0
- CVE-2026-105751Docling: Arbitrary local file read via draw:image xlink:href in the OpenDocument backendPyPI · docling · fixed in 2.120.3
- CVE-2026-105750Docling: `enable_local_fetch` is not enforced in HTML browser-rendering modePyPI · docling, docling-slim · fixed in 2.118.1
- CVE-2026-105749Docling: Unbounded table rowspan/colspan in HTML, JATS, ODS and BoxNote backends causes CPU/memory exhaustionPyPI · docling, docling-slim · fixed in 2.131.0
- CVE-2026-105748Docling: Crafted DoclingDocument JSON embeds local image files into converted outputPyPI · docling, docling-slim · fixed in 2.131.0
- CVE-2026-105747Docling: METS-GBS archive member limit enforced after full member enumeration (memory exhaustion during format detection)PyPI · docling, docling-slim · fixed in 2.131.0
- CVE-2026-105746Docling: KServe v2 OCR engine does not enforce enable_remote_servicesPyPI · docling · fixed in 2.131.0
- CVE-2026-105745Docling: Plugin entry points are imported before the allow_external_plugins checkPyPI · docling, docling-slim · fixed in 2.131.0
- CVE-2026-105744Docling: Arbitrary file read/write (and command execution when shell-escape is enabled) when rendering untrusted TikZ with the opt-in Tectonic enginePyPI · docling, docling-slim · fixed in 2.132.0
- CVE-2026-105743Docling: SSRF guard bypass in remote resource fetching (DNS rebinding / multi-record resolution; no IP validation in HTML render mode)PyPI · docling, docling-slim · fixed in 2.132.0
- CVE-2026-105742Docling: Configured HTTP headers sent to every remote image host named by a documentPyPI · docling, docling-slim · fixed in 2.132.0