Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-55649GeoNode has Stored XSS in Documents metadata abstract fieldPyPI · geonode · fixed in 5.0.3
- CVE-2026-46429GeoNode: Unrestricted File UploadPyPI · geonode · fixed in 5.0.3
- CVE-2026-33050GeoNode: OS command injection via uploaded file layer namePyPI · geonode · fixed in 5.1.0
- CVE-2026-123859SQL Injection via unescaped DataFrame column names in Snowflake Connector for Python and Snowflake Connector for Python (Universal Core)PyPI · snowflake-connector-python · fixed in 4.8.1, 5.2.0
- CVE-2026-58273Rucio: Authorisation Bypass on REST API endpoint for signing URLsPyPI · rucio · fixed in 35.9.0, 38.6.0, 41.0.0rc1
- CVE-2026-112908filelock: StrictSoftFileLock creates its claim directories without the lock mode, so another local user with a write bit on them can end a…PyPI · filelock · fixed in 4.2.1
- CVE-2026-112938filelock: StrictSoftFileLock follows a symbolic link swapped in at <path>.filelock and creates claim files in a directory another local…PyPI · filelock · fixed in 4.2.1
- CVE-2026-112907filelock: On Windows an oplock on a soft lock's marker holds SoftFileLock.acquire() past its timeout and blocks the stale breakPyPI · filelock · fixed in 4.2.1
- CVE-2026-112913filelock: ReadWriteLock on Windows acts on SQLite side files another local user places beside its databasePyPI · filelock · fixed in 4.2.1
- CVE-2026-112910filelock: WindowsFileLock ignores mode: a 0o600 lock file and the ReadWriteLock database inherit the directory ACLPyPI · filelock · fixed in 4.2.1
- CVE-2026-49272OAuthLib: Bearer token can be retrieved as long as client knows a valid client ID for device workflowPyPI · oauthlib · fixed in 4.0.0
- CVE-2026-48705MONAI: MONAILabel Server Crash and Silent Inference Corruption via Crafted DICOM (pydicom DS/IS Validation Bypass)PyPI · monai · fixed in 1.6.1
- CVE-2026-112902Pillow: Memory disclosure and segfault in libtiff encoder via crafted TIFF tagsPyPI · pillow · fixed in 13.0.0
- CVE-2026-112899Pillow: EPS load(scale) lets Ghostscript render past the decompression bomb limitPyPI · pillow · fixed in 13.0.0
- CVE-2026-62268borg extract might modify out-of-tree files when extracting maliciously crafted archivesPyPI · borgbackup · fixed in 1.4.5, 2.0.0b22
- CVE-2026-114134Black: GitHub Action installs unvalidated required-version from pyproject.tomlPyPI · black · fixed in 26.10.1
- CVE-2026-87008Code Graph RAG structural tools follow out-of-root symlinksPyPI · code-graph-rag · fixed in 0.0.587
- CVE-2026-77604Code Graph RAG: MCP paginated read_file path traversal / arbitrary file readPyPI · code-graph-rag · fixed in 0.0.345
- CVE-2026-123036A flaw was found in ansible-core.PyPI · ansible-core · fixed in 2.23.0
- CVE-2026-102895GPUStack: Authentication bypass via trusted loopback source (reverse-proxy TCP peer or X-GPUStack-Real-IP header) grants unauthenticated…PyPI · gpustack · fixed in 2.2.0
- CVE-2026-114456Missing origin validation for the externalbrowser authenticator callback in multiple Snowflake client driversPyPI · snowflake-connector-python · fixed in 4.8.0
- CVE-2026-115878Stanza: RCE via pickle deserialization in the lemmatizerPyPI · stanza · fixed in 1.15.0
- CVE-2026-121577Unescaped header separators in whatstk build a regular expression that backtracks exponentiallyPyPI · whatstk · fixed in 0.9.0
- CVE-2026-63471fastapi-code-generator: Import-time RCE via route path -> unescaped @app.get('...') decoratorPyPI · fastapi-code-generator · fixed in 0.8.1
- CVE-2026-63469fastapi-code-generator: Import-time RCE via response status-code key -> unescaped @app.get(..., responses={...}) dictPyPI · fastapi-code-generator · fixed in 0.8.1
- CVE-2026-63470fastapi-code-generator: Call-time RCE via operation summary -> unescaped route-handler docstringPyPI · fastapi-code-generator · fixed in 0.8.1
- CVE-2026-63417Logging Redactor: PII data in str/repr of non primitive objects was not being redactedPyPI · loggingredactor · fixed in 0.0.7
- CVE-2026-114582Server-side request forgery via SpatialReference string inputPyPI · django · fixed in 6.1.3, 6.0.10, 5.2.19
- CVE-2026-113733Password hash disclosure to "view only" admin users with custom user modelsPyPI · django · fixed in 6.1.3, 6.0.10
- CVE-2026-113593Potential exposure of private data via empty and missing Vary headersPyPI · django · fixed in 6.1.3, 6.0.10, 5.2.19