Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-55630Kiwi TCMS: Stored XSS via javascript: URI in extra_link field (TestPlan & TestCase)PyPI · kiwitcms
- CVE-2026-54724Kiwi TCMS: Open Redirect via unvalidated next parameter in account confirmation endpointPyPI · kiwitcms
- CVE-2026-55211surfio IRAP header size fields cause out-of-bounds readsPyPI · surfio · fixed in 0.0.19
- CVE-2026-91992Tornado before 6.5.7 Credential Leak via Handle ReusePyPI · tornado · fixed in 6.5.7
- CVE-2026-91991Tornado before 6.5.8 Cookie Attribute Injection via Capitalized kwargsPyPI · tornado · fixed in 6.5.8
- CVE-2026-91990Tornado before 6.5.8 Memory Amplification DoS via multipartPyPI · tornado · fixed in 6.5.8
- CVE-2026-91989atomic-agents-stack before 1.1.0 Path Traversal via dashboard serve.pyPyPI · atomic-agents-stack · fixed in 1.1.0
- CVE-2026-91988atomic-agents-stack before 1.1.0 Remote Code Execution via HTTP MCPPyPI · atomic-agents-stack · fixed in 1.1.0
- CVE-2026-91987atomic-agents-stack before 1.1.0 Cost Guardrail Bypass via Unknown ModelPyPI · atomic-agents-stack · fixed in 1.1.0
- CVE-2024-58384Tornado before 6.4.1 CRLF Injection via CurlAsyncHTTPClientPyPI · tornado · fixed in 6.4.1
- CVE-2024-14029Tornado before 6.4.1 HTTP Request Smuggling via Transfer-EncodingPyPI · tornado · fixed in 6.4.1
- CVE-2023-54397Tornado before 6.3.3 HTTP Request Smuggling via Content-LengthPyPI · tornado · fixed in 6.3.3
- CVE-2026-50024GitHacker: Path traversal in ref/hash parsing enables existence oracle and hex-fragment exfiltration via a malicious .git serverPyPI · githacker · fixed in 1.1.8
- CVE-2026-55178GeoLens: Cross-dataset authorization bypass discloses private dataset metadata, schema, sample values, table rows, and raster/vector tile dataPyPI · geolens, geolens-cli · fixed in 1.2.3
- CVE-2026-48987pyLoad: Unbounded Memory Growth Leading to DoS and Potential DDoS in EventManagerPyPI · pyload-ng
- CVE-2026-48737pyLoad: SSRF guard bypass via IPv6 6to4/NAT64 transition wrappers of internal IPsPyPI · pyload-ng
- CVE-2026-54254Cyberdrop-DL: Pixeldrain API key shared with unverified thirdparty sitesPyPI · cyberdrop-dl-patched · fixed in 9.14.0
- CVE-2026-57586CodeRAG: Gradle Wrapper Execution During Dependency Discovery Enables Arbitrary Code ExecutionPyPI · agent-coderag · fixed in 1.3.1
- CVE-2026-59971MySQL MCP Server: Missing Origin/Host Validation in SSE Transport Enables Unauthenticated SQL Execution (DNS Rebinding / Direct Exposure)PyPI · mysql-mcp-server · fixed in 0.4.2
- CVE-2026-57147praisonai-platform: default JWT signing secret 'dev-secret-change-me' enables token forgeryPyPI · praisonai-platform · fixed in 0.1.6
- CVE-2026-57148praisonai-platform 0.1.4 still boots on the hardcoded JWT secret dev-secret-change-me (default-open production guard)PyPI · praisonai-platform · fixed in 0.1.6
- CVE-2026-57112PraisonAI ToolsMCPServer legacy SSE transport accepts attacker Host/Origin and exposes registered toolsPyPI · praisonai, praisonaiagents · fixed in 4.6.59, 1.6.59
- CVE-2026-54559PocketSphinx: Buffer overflows in language and acoustic model loading codePyPI · pocketsphinx · fixed in 5.1.1
- CVE-2026-54334UEFI Firmware Parser: Heap out-of-bounds write in tiano decompressor `ReadCLen`PyPI · uefi-firmware
- CVE-2026-54333UEFI Firmware Parser: Stack out-of-bounds write in tiano decompressor MakeTablePyPI · uefi-firmware
- CVE-2026-55244ASTEVAL: Sandbox Escape via BaseException SubclassesPyPI · asteval · fixed in 1.0.9
- CVE-2026-54447garminconnect: Insecure Permission Assignment for Garmin OAuth Token StorePyPI · garminconnect · fixed in 0.3.5
- CVE-2026-55209resdata insufficiently validates untrusted GRDECL filesPyPI · resdata · fixed in 6.2.9
- CVE-2026-73497MCP Atlassian is a Model Context Protocol (MCP): DNS-rebinding TOCTOU bypass of the SSRF fix (CVE-2026-27826): unauthenticated SSRF to cloud metadataPyPI · mcp-atlassian · fixed in 0.22.0
- CVE-2026-73496MCP Atlassian: Arbitrary server-side file read via attachment uploadPyPI · mcp-atlassian · fixed in 0.22.0