Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-94624vLLM through 0.29.0 Denial of Service via Unbounded P2P KV Offloading SessionsPyPI · vllm · fixed in 0.32.0, 0.30.0
- CVE-2026-94623vLLM through 0.29.0 Denial of Service via NIXL Multi-Prompt Assertion FailurePyPI · vllm · fixed in 0.30.0
- CVE-2026-94622vLLM through 0.29.0 Denial of Service via Incomplete NIXL KV Transfer MetadataPyPI · vllm · fixed in 0.30.0
- CVE-2026-61541Zapros has an Unbounded Content-Encoding decompression chain that allows denial of servicePyPI · zapros · fixed in 0.14.0
- CVE-2026-61652Zapros: Streaming decoders ignored the requested chunk size, allowing a single compressed response chunk to allocate unbounded memory (decompression bomb)PyPI · zapros · fixed in 0.14.0
- CVE-2026-86473Apache Airflow: Logout ignores a presented Authorization bearer token, leaving it revocable only by expiryPyPI · apache-airflow, apache-airflow-core · fixed in 3.3.2
- CVE-2026-75158Apache Airflow: Assets events API returns asset events for every Dag with no per-Dag authorization filterPyPI · apache-airflow, apache-airflow-core · fixed in 3.0.0, 3.3.2
- CVE-2026-82355Apache Airflow: Session cookie silently overrides explicit Authorization bearer header, enabling session fixationPyPI · apache-airflow, apache-airflow-core · fixed in 3.3.2
- CVE-2026-55074Ansible FreeBSD Jail Connection Plugin: Jail escape via symlink following in put_file (host-side root mv)PyPI · ansible-jailexec · fixed in 2.0.0
- CVE-2026-55071MCP-for-Stata: Stata Command Injection via Unsanitized `package` in `ado_package_install`PyPI · stata-mcp · fixed in 1.19.0
- CVE-2026-93989vLLM through 0.29.0 Cross-Request Logits Corruption via bad_wordsPyPI · vllm · fixed in 0.30.0
- CVE-2026-77528Autobahn Python permessage-deflate bypasses maxMessagePayloadSize after inflationPyPI · autobahn, crossbar · fixed in 26.7.1
- CVE-2026-93841vLLM through 0.29.0 Adjacent-Request Sampler State Corruption via Unvalidated Prompt Token IDsPyPI · vllm · fixed in 0.30.0
- CVE-2026-93840vLLM before 0.29.0 Cross-Request Logits Corruption via allowed_token_idsPyPI · vllm · fixed in 0.29.0
- CVE-2026-59163Mnemosyne has JWT signature verification bypass sync server that allows authentication bypassPyPI · mnemosyne-memory · fixed in 3.10.1
- CVE-2026-33625LMDeploy vulnerable to arbitrary code execution via eval() of untrusted quant_dtype in model config loadingPyPI · lmdeploy · fixed in 0.12.3
- CVE-2026-64847AnyIO process-pool workers can block indefinitely on undrained stderrPyPI · anyio · fixed in 4.14.2
- CVE-2025-66455LMDeploy has Remote Code Execution by Pickle Deserialization via handle_zmq_recv in lmdeploy/lmdeploy/pytorch/disagg/conn/engine_conn.pyPyPI · lmdeploy · fixed in 0.16.0
- CVE-2026-63349AnyIO run_process/open_process ignores extra_groups and can retain parent supplementary groupsPyPI · anyio · fixed in 4.14.2
- CVE-2026-62282OpenCVE: Server-Side Request Forgery (SSRF) in notificationsPyPI · opencve · fixed in 3.0.0
- CVE-2026-93592vLLM before 0.28.0 Denial of Service via negative token IDPyPI · vllm · fixed in 0.28.0
- CVE-2026-75157Apache Airflow: Asset queued-events DELETE endpoints gated on Dag READ instead of Dag EDIT (asset-triggered scheduling suppression)PyPI · apache-airflow, apache-airflow-core · fixed in 3.0.0, 3.3.2
- CVE-2026-93436vLLM through 0.29.0 Memory Exhaustion via Rejected RequestsPyPI · vllm · fixed in 0.30.0
- GHSA-XJW9-38CR-6372djust: A template binding inherits a context safety grant it never earned (XSS)PyPI · djust · fixed in 1.1.2
- CVE-2026-86049Jupyter Server: 5xx request logging leaks token-bearing Referer header valuesPyPI · jupyter-server · fixed in 2.21.0
- CVE-2026-49292Kiwi TCMS: The /init-db/ page renders and responds to requests after first usePyPI · kiwitcms
- CVE-2026-54446NetLicensing MCP Server: Unauthenticated Use of Server-Side NetLicensing API Key in HTTP ModePyPI · netlicensing-mcp · fixed in 0.1.6
- CVE-2026-85999Soup Sieve: Polynomial-time ReDoS (O(n²)) in the whitespace/comment trimming regex `RE_WS_END` (triggers on VALID selectors)PyPI · soupsieve · fixed in 2.9.0
- CVE-2026-86000Soup Sieve: Polynomial-time ReDoS (O(n²)) in the `IDENTIFIER` / `VALUE` selector sub-patternsPyPI · soupsieve · fixed in 2.9.0
- CVE-2026-85078sanic chunked trailer request smuggling allows hidden second request executionPyPI · sanic · fixed in 24.12.1, 25.12.1