Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-105741Langflow: IP Spoofing Bypass via `X-Forwarded-For` Allowing Remote Configuration WritePyPI · langflow · fixed in 1.10.3
- CVE-2026-105699Langflow: Authenticated Cross-Project File Disclosure via Unscoped MCP Resource HandlersPyPI · langflow · fixed in 1.9.1
- CVE-2026-105698Langflow: Cross-user flow access and vertex execution via deprecated /api/v1/build/{flow_id}/vertices endpointsPyPI · langflow, langflow-base · fixed in 1.10.1, 0.10.1
- CVE-2026-105697Langflow: OS command injection (RCE) via arbitrary command in MCP stdio server configurationPyPI · langflow, langflow-base +1 · fixed in 1.10.3, 0.10.3
- CVE-2026-105315django-haystack more_like_this Template Tag elasticsearch_backend.py _to_python eval injectionPyPI · django-haystack · fixed in 3.4.0
- CVE-2026-104874Multidict: Reference leak in CIMultiDict/MultiDict items-view union and subtractionPyPI · multidict · fixed in 6.9.1
- CVE-2026-104873LangGraph SDK custom auth silently ignores actions= on resource decoratorsPyPI · langgraph-sdk · fixed in 0.4.4
- CVE-2026-104851fsspec: Server-Side Template Injection in ReferenceFileSystem leads to Remote Code ExecutionPyPI · fsspec · fixed in 2026.6.0
- CVE-2026-104843uv: Path traversal on Windows through wheel extractionPyPI · uv · fixed in 0.12.18
- CVE-2026-53964Document Merge Service vulnerable to RCE via SSTI (xlsx tempaltes)PyPI · document-merge-service · fixed in 9.1.0
- CVE-2026-77387geopy: Regular Expression Denial of Service (ReDoS) in geopy.PointPyPI · geopy · fixed in 2.5.0
- CVE-2026-103263Tornado before 6.5.9 StaticFileHandler Path Traversal via SymlinkPyPI · tornado · fixed in 6.5.9
- CVE-2026-103262Tornado before 6.5.9 Denial of Service via CurlAsyncHTTPClientPyPI · tornado · fixed in 6.5.9
- CVE-2026-103261Tornado before 6.5.9 Denial of Service via Query StringPyPI · tornado · fixed in 6.5.9
- CVE-2026-51886langflow-ai langflow v1.9.3 is affected by: Code Injection.PyPI · langflow · fixed in 1.10.1
- CVE-2026-103001PyJWT.decode() reintroduces options-dict mutation, enabling silent claim-verification bypass on dict reusePyPI · pyjwt
- CVE-2026-103000pypdf: Possible large memory usage when retrieving alphabetical page labelsPyPI · pypdf · fixed in 6.19.0
- CVE-2026-102999pypdf: Possible long runtimes with large amount of embedded filesPyPI · pypdf · fixed in 6.19.0
- CVE-2026-102998pypdf: Possible long runtimes when generating appearance streamsPyPI · pypdf · fixed in 6.19.0
- CVE-2026-102997pypdf: Possible long runtimes for partially malformed FlateDecode streams (Follow-up)PyPI · pypdf · fixed in 6.18.1
- CVE-2026-102996pypdf: Possible large memory usage when parsing font dataPyPI · pypdf · fixed in 6.18.1
- CVE-2026-102995pypdf: Possible large memory usage for large /ToUnicode streams (Follow-up 2)PyPI · pypdf · fixed in 6.18.1
- CVE-2026-102994pypdf: Possible long runtimes/large memory usage when parsing indirect objectsPyPI · pypdf · fixed in 6.18.0
- CVE-2026-102993pypdf: Possible large memory usage when retrieving Roman page labelsPyPI · pypdf · fixed in 6.17.0
- CVE-2026-102991Mako: Path traversal via drive-letter URI on Windows in TemplateLookupPyPI · mako · fixed in 1.4.2
- CVE-2026-103241vllm-project vLLM Gemma4UnifiedParser gemma4.rs denial of servicePyPI · vllm · fixed in 0.27.0
- CVE-2026-102938virtualenv writes prompt values into pyvenv.cfg without sanitizing line boundaries, allowing configuration injectionPyPI · virtualenv · fixed in 21.7.11
- CVE-2026-102937virtualenv: Command injection via --prompt in activate.bat (batch activator)PyPI · virtualenv · fixed in 21.7.12
- CVE-2026-102930virtualenv: Downloaded seed wheels (pip/setuptools) are not integrity-checked before usePyPI · virtualenv · fixed in 21.7.12
- CVE-2026-102925virtualenv bash and fish activation scripts execute commands embedded in pathsPyPI · virtualenv · fixed in 21.7.13