Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-61599djust has an unauthenticated arbitrary module import via the WebSocket/SSE view-mount pathPyPI · djust · fixed in 1.0.7
- CVE-2026-61589djust: WebSocket/runtime reconstructed request omits the client Host, causing host/subdomain TenantResolvers to misresolve the tenant on the live pathPyPI · djust · fixed in 1.0.7
- CVE-2026-61596djust has broken object-level access control (IDOR)PyPI · djust · fixed in 1.0.7
- CVE-2026-61588djust's Django model serialization has no sensitive-field denylist: password hashes, privilege flags, and PII on a public view attribute are sent to the clientPyPI · djust · fixed in 1.0.7
- CVE-2026-61594djust has an authorization bypass on the WebSocket/SSE mount pathPyPI · djust · fixed in 1.0.7
- CVE-2026-61591djust: Unsigned client state snapshot is restored as trusted view state (privilege escalation / state injection)PyPI · djust · fixed in 1.0.7
- CVE-2026-61592djust: SSE sessions are not bound to the authenticated user; the client-chosen session_id is the sole authorization capability (session hijack)PyPI · djust · fixed in 1.0.7
- CVE-2026-61597djust is vulnerable to stored/reflected XSS via javascript: URLs in built-in component template tagsPyPI · djust · fixed in 1.0.7
- CVE-2026-62949AsyncSSH: asyncio event-loop freeze via SSH maximum packet size = 0 in SSH_MSG_CHANNEL_OPEN / OPEN_CONFIRMATIONPyPI · asyncssh · fixed in 2.24.0
- CVE-2026-59823LiteLLM: Server-side request forgery via the `user_config` request parameter in LiteLLM ProxyPyPI · litellm · fixed in 1.83.9
- CVE-2026-69147vLLM: Request-selected PyNvVideoCodec GPU decode bypasses static VRAM reservationPyPI · vllm · fixed in 0.28.0
- CVE-2026-57173vLLM: Unauthenticated audio decompression-bomb DoS in /v1/chat/completionsPyPI · vllm · fixed in 0.24.0
- CVE-2026-61593djust has Cross-Site Request Forgery on the Server-Sent-Events transport: a cross-origin page can drive a victim-authenticated SSE sessionPyPI · djust · fixed in 1.0.7
- CVE-2025-59953LMdeploy has Remote Code Execution by Pickle Deserialization via zmq_rpc.call_and_response() in InterLM/lmdeployPyPI · lmdeploy · fixed in 0.10.2
- CVE-2026-61595djust: Multi-tenant isolation fails open on the WebSocket/SSE path, disclosing other tenants' dataPyPI · djust · fixed in 1.0.7
- CVE-2026-77401Zope AccessControl: Information disclosure through Python string `format` and `format_map` functionsPyPI · accesscontrol · fixed in 7.4
- CVE-2026-76825RestrictedPython: Sandbox escape via string.Formatter field resolutionPyPI · restrictedpython · fixed in 8.4
- CVE-2026-61598Client mass-assignment of arbitrary view attributes via the default dj-model update_model handlerPyPI · djust · fixed in 1.0.7
- CVE-2026-61590djust's observability endpoints are network-exposed: the localhost gate is an opt-in middleware the docs omit, and the views enforce only DEBUGPyPI · djust · fixed in 1.0.7
- CVE-2026-86792Apache Airflow Apache Kafka provider: Connection-editor remote code execution on the Scheduler via Kafka connection callback configurationPyPI · apache-airflow-providers-apache-kafka · fixed in 2.0.0
- CVE-2026-61668DIRAC: Pilot code downloaded over unverified HTTPS connectionPyPI · dirac · fixed in 8.0.79, 9.0.22, 9.1.10
- CVE-2026-61667DIRAC: RCE in FileCatalog DatasetManager via SQL injection + evalPyPI · dirac · fixed in 8.0.79, 9.0.22, 9.1.10
- CVE-2026-45579DIRAC: RCE in RequestManager due to eval on untrusted inputPyPI · dirac · fixed in 8.0.79, 9.0.22, 9.1.10
- CVE-2026-53954Bugsink: DOS using large numbers of event tagsPyPI · bugsink · fixed in 2.2.2
- CVE-2026-54549Meta Ads MCP: Server-Side Request Forgery (SSRF) in `upload_ad_image` via Unrestricted `image_url` FetchPyPI · meta-ads-mcp · fixed in 1.0.115
- CVE-2026-54547Meta Ads MCP: X-Pipeboard-Token Header Auth Bypass Reuses Operator Meta TokenPyPI · meta-ads-mcp · fixed in 1.0.115
- CVE-2026-53710MCP Context Forge: RestrictedPython sandbox bypass via getattr builtin in python_sandbox_serverPyPI · mcp-contextforge-gateway · fixed in 1.0.2
- CVE-2026-55863motionEye: Missing authentication on ActionHandler allows unauthenticated camera action executionPyPI · motioneye · fixed in 0.44.0
- CVE-2026-46488motionEye: Authentication possible via password hashPyPI · motioneye · fixed in 0.44.0
- CVE-2026-54503plone.app.textfield: Stored XSS by spoofing mime typePyPI · plone-app-textfield · fixed in 2.0.2, 3.0.2, 4.0.1